SB20251226245 - Improper locking in Linux kernel udf
Published: December 26, 2025 Updated: December 31, 2025
Security Bulletin ID
SB20251226245
Severity
Low
Patch available
YES
Number of vulnerabilities
1
Exploitation vector
Local access
Highest impact
Denial of service
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 1 security vulnerability.
1) Improper locking (CVE-ID: CVE-2022-50755)
The vulnerability allows a local user to perform a denial of service (DoS) attack.
The vulnerability exists due to improper locking within the udf_rename() function in fs/udf/namei.c. A local user can perform a denial of service (DoS) attack.
Remediation
Install update from vendor's website.
References
- https://git.kernel.org/stable/c/090bf49833c51da297ec74f98ad2bf44daea9311
- https://git.kernel.org/stable/c/156d440dea97deada629bb51cb17887abd862605
- https://git.kernel.org/stable/c/40dba68d418237b1ae2beaa06d46a94dd946278e
- https://git.kernel.org/stable/c/4fca09045509f5bde8fc28e68fbca38cb4bdcf2e
- https://git.kernel.org/stable/c/78eba2778ae10fb2a9d450e14d26eb6f6bf1f906
- https://git.kernel.org/stable/c/9d2cad69547abea961fa80426d600b861de1952b
- https://git.kernel.org/stable/c/c791730f2554a9ebb8f18df9368dc27d4ebc38c2
- https://git.kernel.org/stable/c/d6da7ec0f94f5208c848e0e94b70f54a0bd9c587
- https://git.kernel.org/stable/c/e7a6a53c871460727be09f4414ccb29fb8697526
- https://mirrors.edge.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.86