CVE-2022-50385

In the Linux kernel, the following vulnerability has been resolved:

NFS: Fix an Oops in nfs_d_automount()

When mounting from a NFSv4 referral, path->dentry can end up being a negative dentry, so derive the struct nfs_server from the dentry itself instead.

The bug in nfs_d_automount() causes a NULL-pointer dereference when handling NFSv4 referrals if the path dentry is negative. A malicious or misconfigured NFS server could trigger a client-side oops during automount, leading to a denial of service (no confidentiality/integrity impact).

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.