CVE-2022-50856: cifs: Fix xid leak in cifs_ses_add_channel()
Vulnerability summary
CVE-2022-50856 is a vulnerability in linux with no CVSS score yet. EPSS estimates a 0.20% chance of exploitation in the next 30 days, higher than 9.8% of scored vulnerabilities.
No CVSS vector published; no exploitation reported by the 5 checked sources
Source freshness unavailable
How is this decided?Advisory lineage
Upstream 0 · Downstream 6 · Related 4Timeline
- 30-12-2025PublishedVulnerability first disclosed.
- 11-05-2026Last modifiedVulnerability information updated.
Description
In the Linux kernel, the following vulnerability has been resolved: cifs: Fix xid leak in cifs_ses_add_channel() Before return, should free the xid, otherwise, the xid will be leaked.
CVSS metrics
Risk metrics not yet published.
EPSS trend
Probability
0.20%
Chance of exploitation in the next 30 days
Percentile
10%
Versus all other CVEs
30-day change
No change 0.00 pp
From 0.20% on 04-10-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Known conditions: not stated in public data.
Ubuntu103 products
- linux< 5.15.0-60.66
- linux-allwinner-5.19All versions (No fix recorded)
- linux-aws< 5.15.0-1030.34
- linux-aws-5.0All versions (No fix recorded)
- linux-aws-5.11All versions (No fix recorded)
Debian1 product
- linux< 6.0.6-1
Linux1 product
- linux≥ d70e9fa55884760b6d6c293dbf20d8c52ce11fb7, < 7286f875510486fdc2fc426b7c826262e2283a65 | ≥ d70e9fa55884760b6d6c293dbf20d8c52ce11fb7, < 847301f0ee1c29f34cc48547ce1071990f24969c | ≥ d70e9fa55884760b6d6c293dbf20d8c52ce11fb7, < db2a8b6c17e128d91f35d836c569f4a6bda4471b | ≥ d70e9fa55884760b6d6c293dbf20d8c52ce11fb7, < e909d054bdea75ef1ec48c18c5936affdaecbb2c | 5.5
3 vendors · 105 products
