CVE-2022-49704

MEDIUM

Linux Kernel - Use-After-Free in 9p Protocol Link Handling

Title source: llm

Description

In the Linux kernel, the following vulnerability has been resolved: 9p: fix fid refcount leak in v9fs_vfs_get_link we check for protocol version later than required, after a fid has been obtained. Just move the version check earlier.

References (3)

Core 3

Core References

Patch

https://git.kernel.org/stable/c/f0126bcaee81dabc1926012126aa74caa03a4c6e

Patch

https://git.kernel.org/stable/c/e7b6d622bd812013eb39c8f4cd65b7ee8ede1e02

Patch

https://git.kernel.org/stable/c/e5690f263208c5abce7451370b7786eb25b405eb

Scores

CVSS v3 5.5

EPSS 0.0025

EPSS Percentile 16.8%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

Status published

Products (12)

linux/Kernel 5.11.0 - 5.15.51linux

linux/Kernel 5.16.0 - 5.18.8linux

Linux/Linux < 5.11

Linux/Linux 5.11

Linux/Linux 5.15.51 - 5.15.*

Linux/Linux 5.18.8 - 5.18.*

Linux/Linux 5.19

Linux/Linux 6636b6dcc3db2258cd0585b8078c1c225c4b6dde - e5690f263208c5abce7451370b7786eb25b405eb

Linux/Linux 6636b6dcc3db2258cd0585b8078c1c225c4b6dde - e7b6d622bd812013eb39c8f4cd65b7ee8ede1e02

Linux/Linux 6636b6dcc3db2258cd0585b8078c1c225c4b6dde - f0126bcaee81dabc1926012126aa74caa03a4c6e

... and 2 more

Published Feb 26, 2025

Tracked Since Feb 18, 2026