CVE-2022-49704

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2022-49704
In the Linux kernel, the following vulnerability has been resolved: 9p: fix fid refcount leak in v9fs_vfs_get_link we check for protocol version later than required, after a fid has been obtained. Just move the version check earlier.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/e5690f263208c5abce7451370b7786eb25b405eb Patch
https://git.kernel.org/stable/c/e7b6d622bd812013eb39c8f4cd65b7ee8ede1e02 Patch
https://git.kernel.org/stable/c/f0126bcaee81dabc1926012126aa74caa03a4c6e Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.19:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.19:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.19:rc3:*:*:*:*:*:*
History

11 Mar 2025, 21:57

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
References () https://git.kernel.org/stable/c/e5690f263208c5abce7451370b7786eb25b405eb - () https://git.kernel.org/stable/c/e5690f263208c5abce7451370b7786eb25b405eb - Patch
References () https://git.kernel.org/stable/c/e7b6d622bd812013eb39c8f4cd65b7ee8ede1e02 - () https://git.kernel.org/stable/c/e7b6d622bd812013eb39c8f4cd65b7ee8ede1e02 - Patch
References () https://git.kernel.org/stable/c/f0126bcaee81dabc1926012126aa74caa03a4c6e - () https://git.kernel.org/stable/c/f0126bcaee81dabc1926012126aa74caa03a4c6e - Patch
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: 9p: se ha corregido la fuga de recuento de referencias de fid en v9fs_vfs_get_link. Comprobamos la versión del protocolo más tarde de lo requerido, después de que se haya obtenido un fid. Simplemente, adelantamos la comprobación de la versión.
First Time Linux linux Kernel
Linux
CWE NVD-CWE-Other
CPE cpe:2.3:o:linux:linux_kernel:5.19:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.19:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.19:rc1:*:*:*:*:*:*

26 Feb 2025, 07:01

Type Values Removed Values Added
New CVE
Information

Published : 2025-02-26 07:01

Updated : 2025-03-11 21:57

NVD link : CVE-2022-49704

Mitre link : CVE-2022-49704

CVE.ORG link : CVE-2022-49704

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
NVD-CWE-Other