01 Record

CVE-2022-50257

xen/gntdev: Prevent leaking grants

UnratedPUBLISHEDCNA: Linux

CNA base scoreUnratedNo CNA CVSS vector

View raw JSON

02 Description

xen/gntdev: Prevent leaking grants

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 0.16% probability of exploitation activity in the next 30 days.
EPSS percentile: Equal to or higher than the score of 5.4% of scored records. A rank, not a probability.
NVD base score: 5.5 (CVSS v3.x), scored by the NVD independently of the CNA.
NVD CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
NVD analysis status: Analyzed. NVD last modified this record on 2026-06-17.
Red Hat severity: No Red Hat rating. Red Hat rates the CVEs that affect its products.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published: 2025-09-15 14:02Z1 YR AGO
Last updated: 2026-05-23 15:23Z5 MO AGO
Reserved: 2025-09-15
Assigning CNA: Linux
Record state: PUBLISHED
Severity: Not rated by the issuing CNA
CNA CVSS vector: Not published by the issuing CNA
Weaknesses: No CWE assigned
Data version: 5.2
Document digest: 106d9f9a2d1a2a09571513bef2059a596e48094e4e212c14ce7ddb275ba0ba8e

05 Affected products

VendorProductVersionsPlatforms

LinuxLinux36cd49b071fceca70326d9db786aa15e9fffd677 to < b043f2cab100bed3e0a999dcf38cc05b1e4a7e41, 2fe26a9a70482bea7827803fdec98050fec68b20 to < 49bb053b1ec367b6883030eb2cca696e91435679, 73e9e72247b98da65bc32d41a961e820cca5f503 to < cb1ccfe7655380f77a58b340072f5f40bc285902, ee25841221c17228cbd30262a90f3b03ad80cdf6 to < 3d056d81b93a787613eda44aeb21fc14c3392b34, 79963021fd718b74bed4cbc98f5f49d3ba6fb48c to < 49db6cb81400ba863e1a85e55fcdf1031807c23f, 87a54feba68f5e47925c8e49100db9b2a8add761 to < 1cb73704cb4778299609634a790a80daba582f7d, dbe97cff7dd9f0f75c524afdd55ad46be3d15295 to < 0bccddd9b8f03ad57bb738f0d3da8845d4e1e579, dbe97cff7dd9f0f75c524afdd55ad46be3d15295 to < 273f6a4f71be12e2ec80a4919837d6e4fa933a04, dbe97cff7dd9f0f75c524afdd55ad46be3d15295 to < 0991028cd49567d7016d1b224fe0117c35059f86, d4a49d20cd7cdb6bd075cd04c2cd00a7eba907ed, 4.9.322 to < 4.9.332, 4.14.287 to < 4.14.298, 4.19.251 to < 4.19.264, 5.4.204 to < 5.4.223, 5.10.129 to < 5.10.153, 5.15.51 to < 5.15.75, 5.18.8 to < 5.19, 5.19—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/b043f2cab100bed3e0a999dcf38cc05b1e4a7e41
git.kernel.orghttps://git.kernel.org/stable/c/49bb053b1ec367b6883030eb2cca696e91435679
git.kernel.orghttps://git.kernel.org/stable/c/cb1ccfe7655380f77a58b340072f5f40bc285902
git.kernel.orghttps://git.kernel.org/stable/c/3d056d81b93a787613eda44aeb21fc14c3392b34
git.kernel.orghttps://git.kernel.org/stable/c/49db6cb81400ba863e1a85e55fcdf1031807c23f
git.kernel.orghttps://git.kernel.org/stable/c/1cb73704cb4778299609634a790a80daba582f7d
git.kernel.orghttps://git.kernel.org/stable/c/0bccddd9b8f03ad57bb738f0d3da8845d4e1e579
git.kernel.orghttps://git.kernel.org/stable/c/273f6a4f71be12e2ec80a4919837d6e4fa933a04
git.kernel.orghttps://git.kernel.org/stable/c/0991028cd49567d7016d1b224fe0117c35059f86

07 Fixed in

Debian 12

linux
Fixed in 6.0.3-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 13

linux
Fixed in 6.0.3-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 14

linux
Fixed in 6.0.3-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.