CVE-2022-49103

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2022-49103
In the Linux kernel, the following vulnerability has been resolved: NFSv4.2: fix reference count leaks in _nfs42_proc_copy_notify() [You don't often get email from xiongx18@fudan.edu.cn. Learn why this is important at http://aka.ms/LearnAboutSenderIdentification.] The reference counting issue happens in two error paths in the function _nfs42_proc_copy_notify(). In both error paths, the function simply returns the error code and forgets to balance the refcount of object `ctx`, bumped by get_nfs_open_context() earlier, which may cause refcount leaks. Fix it by balancing refcount of the `ctx` object before the function returns in both error paths.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/9b9feec97c1fc7dd9bb69f62c4905cddf1801599 Patch
https://git.kernel.org/stable/c/b37f482ba9f0e6382c188e3fccf6c4b2fdc938eb Patch
https://git.kernel.org/stable/c/b7f114edd54326f730a754547e7cfb197b5bc132 Patch
https://git.kernel.org/stable/c/f46f632f9cfae4b2e3635fa58840a8ec584c42e3 Patch
https://git.kernel.org/stable/c/fb73bf6305f4eb8f0cf9a61ee874d55f019d6dc4 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

13 Mar 2025, 21:34

Type Values Removed Values Added
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
First Time Linux linux Kernel
Linux
References () https://git.kernel.org/stable/c/9b9feec97c1fc7dd9bb69f62c4905cddf1801599 - () https://git.kernel.org/stable/c/9b9feec97c1fc7dd9bb69f62c4905cddf1801599 - Patch
References () https://git.kernel.org/stable/c/b37f482ba9f0e6382c188e3fccf6c4b2fdc938eb - () https://git.kernel.org/stable/c/b37f482ba9f0e6382c188e3fccf6c4b2fdc938eb - Patch
References () https://git.kernel.org/stable/c/b7f114edd54326f730a754547e7cfb197b5bc132 - () https://git.kernel.org/stable/c/b7f114edd54326f730a754547e7cfb197b5bc132 - Patch
References () https://git.kernel.org/stable/c/f46f632f9cfae4b2e3635fa58840a8ec584c42e3 - () https://git.kernel.org/stable/c/f46f632f9cfae4b2e3635fa58840a8ec584c42e3 - Patch
References () https://git.kernel.org/stable/c/fb73bf6305f4eb8f0cf9a61ee874d55f019d6dc4 - () https://git.kernel.org/stable/c/fb73bf6305f4eb8f0cf9a61ee874d55f019d6dc4 - Patch
CWE NVD-CWE-Other
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: NFSv4.2: se corrigen las fugas de recuento de referencias en _nfs42_proc_copy_notify() [No suele recibir correos electrónicos de xiongx18@fudan.edu.cn. Descubra por qué esto es importante en http://aka.ms/LearnAboutSenderIdentification.] El problema del recuento de referencias ocurre en dos rutas de error en la función _nfs42_proc_copy_notify(). En ambas rutas de error, la función simplemente devuelve el código de error y se olvida de equilibrar el recuento de referencias del objeto `ctx`, que se elevó anteriormente mediante get_nfs_open_context(), lo que puede provocar fugas de recuento de referencias. Arréglelo equilibrando el recuento de referencias del objeto `ctx` antes de que la función regrese en ambas rutas de error.

26 Feb 2025, 07:00

Type Values Removed Values Added
New CVE
Information

Published : 2025-02-26 07:00

Updated : 2025-03-13 21:34

NVD link : CVE-2022-49103

Mitre link : CVE-2022-49103

CVE.ORG link : CVE-2022-49103

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
NVD-CWE-Other