Security readout for executives and security teams
Plain-English summary
CVE-2022-50755 is a Linux kernel UDF filesystem bug. Under certain rename error handling, the kernel may release the same buffer twice, triggering a warning about freeing an already free buffer. Public sources do not provide CVSS, confirmed impact beyond the warning, or evidence of active exploitation.
Executive priority
Track and remediate through normal kernel update processes. Raise priority for environments that handle untrusted media or disk images. Current public evidence does not justify emergency response absent vendor-specific severity or exploitation reports.
Technical view
The issue is in fs/udf udf_rename(). When udf_find_entry() returns NULL, it already releases ofibh.sbh and ofibh.ebh; udf_rename() released them again, unbalancing buffer_head b_count. The kernel fix avoids brelse() in udf_rename() on that failure path.
Likely exposure
Systems running affected Linux kernel versions with UDF filesystem support are potentially exposed, especially where UDF media or images can be mounted or processed. The source lists Linux kernel versions from 4.2 through 6.2 as affected, but distribution-specific package status is not provided.
Exploitation context
The report came from syzbot and shows a kernel warning during cleanup after UDF rename handling. The provided sources do not state remote exploitability, privilege requirements, denial-of-service impact, or active exploitation. KEV status is false.
Researcher notes
Evidence is limited to the CVE record and kernel stable commits. No CWE, CVSS, or exploitability assessment is provided. The affected-version data appears broad and should be reconciled against distro backports and stable commit inclusion.
Mitigation direction
- Check your Linux distribution advisory for CVE-2022-50755 status.
- Update to a kernel package containing the referenced stable UDF fix.
- If UDF is unnecessary, consider disabling or restricting UDF mounting per vendor guidance.
- Prioritize systems that mount untrusted removable media or disk images.
Validation and detection
- Inventory Linux kernel versions across servers, endpoints, and appliances.
- Check whether UDF filesystem support is enabled or loadable.
- Map installed kernels to vendor advisories or the referenced stable commits.
- Review logs for related kernel warnings mentioning brelse or UDF rename.
Public sources used
Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.
Conservative CVE-to-ATT&CK context
These mappings and lookup hints may be relevant to the vulnerability behavior, CWE, affected product, or exposure path. Glexia-inferred context is not an official MITRE, ATT&CK, CWE, or CVE Program mapping.
ATT&CK lookup starting points
Use these exact CWE pages and searches to review the Glexia ATT&CK library from this CVE's weakness and description context.
CVE-2022-50755 mapping review
Open the CVE-to-ATT&CK bridge for reviewed, inferred, or future official mappings tied to this CVE.
Open ATT&CK lookup- Severity
- Unknown
- CVSS
- Not scored
- Known Exploited
- No
- Published
CNA and ADP enrichment extracted from CVE v5
These fields come from the CVE record and ADP containers, not from Glexia's Take. They preserve time-varying source decisions such as CISA SSVC, KEV status, CVSS metrics, and provider references.
CVSS and timeline data
No CVSS vectors or timeline events were available in the normalized CVE source material.
Source materials
- CVE List V5 sourceCVE List V5
- https://git.kernel.org/stable/c/78eba2778ae10fb2a9d450e14d26eb6f6bf1f906CVE reference
- https://git.kernel.org/stable/c/9d2cad69547abea961fa80426d600b861de1952bCVE reference
- https://git.kernel.org/stable/c/d6da7ec0f94f5208c848e0e94b70f54a0bd9c587CVE reference
- https://git.kernel.org/stable/c/156d440dea97deada629bb51cb17887abd862605CVE reference
- https://git.kernel.org/stable/c/40dba68d418237b1ae2beaa06d46a94dd946278eCVE reference
- https://git.kernel.org/stable/c/e7a6a53c871460727be09f4414ccb29fb8697526CVE reference
- https://git.kernel.org/stable/c/4fca09045509f5bde8fc28e68fbca38cb4bdcf2eCVE reference
- https://git.kernel.org/stable/c/090bf49833c51da297ec74f98ad2bf44daea9311CVE reference
- https://git.kernel.org/stable/c/c791730f2554a9ebb8f18df9368dc27d4ebc38c2CVE reference
Products and packages named in the record
CWE details
CWE links open Glexia weakness intelligence pages with official CWE context, developer remediation guidance, and related CVE mappings.