Back to CVE records
Not yet scoredPublished Dec 30, 2025

CVE-2022-50853NFSv4: Fix a credential leak in _nfs4_discover_trunking()

Updated under an hour ago ()

Does this affect you?

It affects Linux. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

In the Linux kernel, the following vulnerability has been resolved: NFSv4: Fix a credential leak in _nfs4_discover_trunking()

CVSS
Not yet scored
Weakness (CWE)
Not given
Known exploited
Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days)
Not loaded for this CVE
Assigned by
Linux
NVD analysis
Deferred
Record last updated
May 23, 2026
First seen by InfoSec Signals
Oct 9, 2026

Affected products

Affected products
Linux Linux
linux:linux (from the name)
from ead049562758cc415437c0e99b09ce5eb2ab3dc0 before c6aca4c7ba8f6d40a0cfeeb09160dd8efdf97c64; from 4f40a5b5544618b096d1611a18219dd91fd57f80 before dfad5d5e7511933c2ae3d12a8131840074c5a73d; from 4f40a5b5544618b096d1611a18219dd91fd57f80 before b247a9828f6607d41189fa6c2a3be754d33cae86; from 4f40a5b5544618b096d1611a18219dd91fd57f80 before e83458fce080dc23c25353a1af90bfecf79c7369; 2f42531f545f2670192b894d14d50e0539e47e24; from 5.15.77 before 5.15.86; from 5.18.10 before 5.19
CNA record

References

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.