CVE-2022-49768

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2022-49768
In the Linux kernel, the following vulnerability has been resolved: 9p: trans_fd/p9_conn_cancel: drop client lock earlier syzbot reported a double-lock here and we no longer need this lock after requests have been moved off to local list: just drop the lock earlier.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/52f1c45dde9136f964d63a77d19826c8a74e2c7f Patch
https://git.kernel.org/stable/c/612c977f5d481f551d03d83d0aef588845c1300c Patch
https://git.kernel.org/stable/c/82825dbf393f7c7979d462f9609a15bde8092b3f Patch
https://git.kernel.org/stable/c/96760723aae1b45f733f702abb4333137143909f Patch
https://git.kernel.org/stable/c/a4f1a01b2e81378fce9ca528d4d8a049e4b58fcd Patch
https://git.kernel.org/stable/c/e3031280fe4eaf61a09e60823331f81f321be8e1 Patch
https://git.kernel.org/stable/c/f14858bc77c567e089965962877ee726ffad0556 Patch
https://git.kernel.org/stable/c/fec1406f5e7ab20b71f6d231792b0040e3300aaf Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

06 Nov 2025, 21:47

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/52f1c45dde9136f964d63a77d19826c8a74e2c7f - () https://git.kernel.org/stable/c/52f1c45dde9136f964d63a77d19826c8a74e2c7f - Patch
References () https://git.kernel.org/stable/c/612c977f5d481f551d03d83d0aef588845c1300c - () https://git.kernel.org/stable/c/612c977f5d481f551d03d83d0aef588845c1300c - Patch
References () https://git.kernel.org/stable/c/82825dbf393f7c7979d462f9609a15bde8092b3f - () https://git.kernel.org/stable/c/82825dbf393f7c7979d462f9609a15bde8092b3f - Patch
References () https://git.kernel.org/stable/c/96760723aae1b45f733f702abb4333137143909f - () https://git.kernel.org/stable/c/96760723aae1b45f733f702abb4333137143909f - Patch
References () https://git.kernel.org/stable/c/a4f1a01b2e81378fce9ca528d4d8a049e4b58fcd - () https://git.kernel.org/stable/c/a4f1a01b2e81378fce9ca528d4d8a049e4b58fcd - Patch
References () https://git.kernel.org/stable/c/e3031280fe4eaf61a09e60823331f81f321be8e1 - () https://git.kernel.org/stable/c/e3031280fe4eaf61a09e60823331f81f321be8e1 - Patch
References () https://git.kernel.org/stable/c/f14858bc77c567e089965962877ee726ffad0556 - () https://git.kernel.org/stable/c/f14858bc77c567e089965962877ee726ffad0556 - Patch
References () https://git.kernel.org/stable/c/fec1406f5e7ab20b71f6d231792b0040e3300aaf - () https://git.kernel.org/stable/c/fec1406f5e7ab20b71f6d231792b0040e3300aaf - Patch
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: 9p: trans_fd/p9_conn_cancel: eliminar el bloqueo del cliente anteriormente. syzbot informó un bloqueo doble aquí y ya no necesitamos este bloqueo después de que las solicitudes se hayan movido a la lista local: simplemente elimine el bloqueo anteriormente.
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
First Time Linux
Linux linux Kernel
CWE CWE-667
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5

01 May 2025, 15:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-05-01 15:15

Updated : 2025-11-06 21:47

NVD link : CVE-2022-49768

Mitre link : CVE-2022-49768

CVE.ORG link : CVE-2022-49768

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-667

Improper Locking