{
  "cveId": "CVE-2022-50323",
  "url": "https://patchblox.com/security/cve/CVE-2022-50323",
  "summary": "CVE-2022-50323 is fixed in linux on 1 platform, first by DEBIAN-CVE-2022-50323, released September 15, 2025. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  net: do not sense pfmemalloc status in skb_appen...",
  "description": "In the Linux kernel, the following vulnerability has been resolved:  net: do not sense pfmemalloc status in skb_append_pagefrags()  skb_append_pagefrags() is used by af_unix and udp sendpage() implementation so far.  In commit 326140063946 (\u0022tcp: TX zerocopy should not sense pfmemalloc status\u0022) we explained why we should not sense pfmemalloc status for pages owned by user space.  We should also use skb_fill_page_desc_noacc() in skb_append_pagefrags() to avoid following KCSAN report:  BUG: KCSAN: data-race in lru_add_fn / skb_append_pagefrags  write to 0xffffea00058fc1c8 of 8 bytes by task 17319 on cpu 0: __list_add include/linux/list.h:73 [inline] list_add include/linux/list.h:88 [inline] lruvec_add_folio include/linux/mm_inline.h:323 [inline] lru_add_fn\u002B0x327/0x410 mm/swap.c:228 folio_batch_move_lru\u002B0x1e1/0x2a0 mm/swap.c:246 lru_add_drain_cpu\u002B0x73/0x250 mm/swap.c:669 lru_add_drain\u002B0x21/0x60 mm/swap.c:773 free_pages_and_swap_cache\u002B0x16/0x70 mm/swap_state.c:311 tlb_batch_pages_flush mm/mmu_gather.c:59 [inline] tlb_flush_mmu_free mm/mmu_gather.c:256 [inline] tlb_flush_mmu\u002B0x5b2/0x640 mm/mmu_gather.c:263 tlb_finish_mmu\u002B0x86/0x100 mm/mmu_gather.c:363 exit_mmap\u002B0x190/0x4d0 mm/mmap.c:3098 __mmput\u002B0x27/0x1b0 kernel/fork.c:1185 mmput\u002B0x3d/0x50 kernel/fork.c:1207 copy_process\u002B0x19fc/0x2100 kernel/fork.c:2518 kernel_clone\u002B0x166/0x550 kernel/fork.c:2671 __do_sys_clone kernel/fork.c:2812 [inline] __se_sys_clone kernel/fork.c:2796 [inline] __x64_sys_clone\u002B0xc3/0xf0 kernel/fork.c:2796 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64\u002B0x2b/0x70 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe\u002B0x63/0xcd  read to 0xffffea00058fc1c8 of 8 bytes by task 17325 on cpu 1: page_is_pfmemalloc include/linux/mm.h:1817 [inline] __skb_fill_page_desc include/linux/skbuff.h:2432 [inline] skb_fill_page_desc include/linux/skbuff.h:2453 [inline] skb_append_pagefrags\u002B0x210/0x600 net/core/skbuff.c:3974 unix_stream_sendpage\u002B0x45e/0x990 net/unix/af_unix.c:2338 kernel_sendpage\u002B0x184/0x300 net/socket.c:3561 sock_sendpage\u002B0x5a/0x70 net/socket.c:1054 pipe_to_sendpage\u002B0x128/0x160 fs/splice.c:361 splice_from_pipe_feed fs/splice.c:415 [inline] __splice_from_pipe\u002B0x222/0x4d0 fs/splice.c:559 splice_from_pipe fs/splice.c:594 [inline] generic_splice_sendpage\u002B0x89/0xc0 fs/splice.c:743 do_splice_from fs/splice.c:764 [inline] direct_splice_actor\u002B0x80/0xa0 fs/splice.c:931 splice_direct_to_actor\u002B0x305/0x620 fs/splice.c:886 do_splice_direct\u002B0xfb/0x180 fs/splice.c:974 do_sendfile\u002B0x3bf/0x910 fs/read_write.c:1255 __do_sys_sendfile64 fs/read_write.c:1323 [inline] __se_sys_sendfile64 fs/read_write.c:1309 [inline] __x64_sys_sendfile64\u002B0x10c/0x150 fs/read_write.c:1309 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64\u002B0x2b/0x70 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe\u002B0x63/0xcd  value changed: 0x0000000000000000 -\u003E 0xffffea00058fc188  Reported by Kernel Concurrency Sanitizer on: CPU: 1 PID: 17325 Comm: syz-executor.0 Not tainted 6.1.0-rc1-syzkaller-00158-g440b7895c990-dirty #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022",
  "published": "2025-09-15T15:15:44Z",
  "severity": "medium",
  "cvss": 5.5,
  "cvssVector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
  "epss": 0.00157,
  "epssPercentile": 0.04905,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 12.15 (bookworm)",
      "fixedVersion": "6.0.7-1",
      "fix": "DEBIAN-CVE-2022-50323",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2022-50323",
      "released": "2025-09-15T15:15:44Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "6.0.7-1",
      "fix": "DEBIAN-CVE-2022-50323",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2022-50323",
      "released": "2025-09-15T15:15:44Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 14",
      "fixedVersion": "6.0.7-1",
      "fix": "DEBIAN-CVE-2022-50323",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2022-50323",
      "released": "2025-09-15T15:15:44Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T06:59:42Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}