{
  "cveId": "CVE-2022-50755",
  "url": "https://patchblox.com/security/cve/CVE-2022-50755",
  "summary": "CVE-2022-50755 is fixed in linux on 1 platform, first by DEBIAN-CVE-2022-50755, released December 24, 2025. It is not reported as exploited. Patch Radar priority: High.",
  "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  udf: Avoid double brelse() in udf_rename()  syzb...",
  "description": "In the Linux kernel, the following vulnerability has been resolved:  udf: Avoid double brelse() in udf_rename()  syzbot reported a warning like below [1]:  VFS: brelse: Trying to free free buffer WARNING: CPU: 2 PID: 7301 at fs/buffer.c:1145 __brelse\u002B0x67/0xa0 ... Call Trace:  \u003CTASK\u003E  invalidate_bh_lru\u002B0x99/0x150  smp_call_function_many_cond\u002B0xe2a/0x10c0  ? generic_remap_file_range_prep\u002B0x50/0x50  ? __brelse\u002B0xa0/0xa0  ? __mutex_lock\u002B0x21c/0x12d0  ? smp_call_on_cpu\u002B0x250/0x250  ? rcu_read_lock_sched_held\u002B0xb/0x60  ? lock_release\u002B0x587/0x810  ? __brelse\u002B0xa0/0xa0  ? generic_remap_file_range_prep\u002B0x50/0x50  on_each_cpu_cond_mask\u002B0x3c/0x80  blkdev_flush_mapping\u002B0x13a/0x2f0  blkdev_put_whole\u002B0xd3/0xf0  blkdev_put\u002B0x222/0x760  deactivate_locked_super\u002B0x96/0x160  deactivate_super\u002B0xda/0x100  cleanup_mnt\u002B0x222/0x3d0  task_work_run\u002B0x149/0x240  ? task_work_cancel\u002B0x30/0x30  do_exit\u002B0xb29/0x2a40  ? reacquire_held_locks\u002B0x4a0/0x4a0  ? do_raw_spin_lock\u002B0x12a/0x2b0  ? mm_update_next_owner\u002B0x7c0/0x7c0  ? rwlock_bug.part.0\u002B0x90/0x90  ? zap_other_threads\u002B0x234/0x2d0  do_group_exit\u002B0xd0/0x2a0  __x64_sys_exit_group\u002B0x3a/0x50  do_syscall_64\u002B0x34/0xb0  entry_SYSCALL_64_after_hwframe\u002B0x63/0xcd  The cause of the issue is that brelse() is called on both ofibh.sbh and ofibh.ebh by udf_find_entry() when it returns NULL.  However, brelse() is called by udf_rename(), too.  So, b_count on buffer_head becomes unbalanced.  This patch fixes the issue by not calling brelse() by udf_rename() when udf_find_entry() returns NULL.",
  "published": "2025-12-24T13:16:02Z",
  "severity": "high",
  "cvss": 7.8,
  "cvssVector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
  "epss": 0.00211,
  "epssPercentile": 0.11367,
  "priority": "High",
  "priorityTier": 3,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 12.15 (bookworm)",
      "fixedVersion": "6.1.4-1",
      "fix": "DEBIAN-CVE-2022-50755",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2022-50755",
      "released": "2025-12-24T13:16:02Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "6.1.4-1",
      "fix": "DEBIAN-CVE-2022-50755",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2022-50755",
      "released": "2025-12-24T13:16:02Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 14",
      "fixedVersion": "6.1.4-1",
      "fix": "DEBIAN-CVE-2022-50755",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2022-50755",
      "released": "2025-12-24T13:16:02Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T13:06:02Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}