CVE-2022-50821

In the Linux kernel, the following vulnerability has been resolved:

SUNRPC: Don't leak netobj memory when gss_read_proxy_verf() fails

A memory leak was fixed in gss_read_proxy_verf() where in_handle->data was not freed on several error paths (invalid length checks, allocation failures). An unauthenticated remote attacker may be able to trigger these failures repeatedly via RPCGSS/gssproxy-related traffic, causing gradual kernel memory consumption and potentially leading to a denial of service. The impact is typically resource exhaustion rather than memory corruption or privilege escalation. Exploitation does not require local access to the target host, but assumes network-level access to RPC/NFS services, which are commonly restricted to internal or trusted environments.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this issue, prevent module sunrpc from being loaded. Please see https://access.redhat.com/solutions/41278 for how to blacklist a kernel module to prevent it from loading automatically.