CVE-2022-49362

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2022-49362
In the Linux kernel, the following vulnerability has been resolved: NFSD: Fix potential use-after-free in nfsd_file_put() nfsd_file_put_noref() can free @nf, so don't dereference @nf immediately upon return from nfsd_file_put_noref().

7.8 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/261eabe19cb28e4a8587a4442d257b543d7c2d57 Patch
https://git.kernel.org/stable/c/333dcc94ebf53f79f3dc0e7a7c16700bc7ff7e57 Patch
https://git.kernel.org/stable/c/ada1757b259f353cade47037ee0a0249b4cddad3 Patch
https://git.kernel.org/stable/c/b6c71c66b0ad8f2b59d9bc08c7a5079b110bec01 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.19:rc1:*:*:*:*:*:*
History

25 Mar 2025, 14:51

Type Values Removed Values Added
First Time Linux
Linux linux Kernel
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: NFSD: Se corrige el posible use-after-free en nfsd_file_put() nfsd_file_put_noref() puede liberar @nf, por lo que no desreferencia @nf inmediatamente después del regreso de nfsd_file_put_noref().
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.19:rc1:*:*:*:*:*:*
References () https://git.kernel.org/stable/c/261eabe19cb28e4a8587a4442d257b543d7c2d57 - () https://git.kernel.org/stable/c/261eabe19cb28e4a8587a4442d257b543d7c2d57 - Patch
References () https://git.kernel.org/stable/c/333dcc94ebf53f79f3dc0e7a7c16700bc7ff7e57 - () https://git.kernel.org/stable/c/333dcc94ebf53f79f3dc0e7a7c16700bc7ff7e57 - Patch
References () https://git.kernel.org/stable/c/ada1757b259f353cade47037ee0a0249b4cddad3 - () https://git.kernel.org/stable/c/ada1757b259f353cade47037ee0a0249b4cddad3 - Patch
References () https://git.kernel.org/stable/c/b6c71c66b0ad8f2b59d9bc08c7a5079b110bec01 - () https://git.kernel.org/stable/c/b6c71c66b0ad8f2b59d9bc08c7a5079b110bec01 - Patch

27 Feb 2025, 19:15

Type Values Removed Values Added
CWE CWE-416
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 7.8

26 Feb 2025, 07:01

Type Values Removed Values Added
New CVE
Information

Published : 2025-02-26 07:01

Updated : 2025-03-25 14:51

NVD link : CVE-2022-49362

Mitre link : CVE-2022-49362

CVE.ORG link : CVE-2022-49362

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-416

Use After Free