CVE-2022-49020

net/9p: Fix a potential socket leak in p9_socket_open

State: Published
Severity: Not scored
Published: Oct 21, 2024
Updated: May 11, 2026
Reserved: Aug 22, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

net/9p: Fix a potential socket leak in p9_socket_open

Both p9_fd_create_tcp() and p9_fd_create_unix() will call p9_socket_open(). If the creation of p9_trans_fd fails, p9_fd_create_tcp() and p9_fd_create_unix() will return an error directly instead of releasing the cscoket, which will result in a socket leak.

This patch adds sock_release() to fix the leak issue.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	6b18662e239a032f908b7f6e164bdf7e2e0a32c9 to before 0396227f4daf4792a6a8aaa3b7771dc25c4cd443Affected 6b18662e239a032f908b7f6e164bdf7e2e0a32c9 to before ded893965b895b2dccd3d1436d8d3daffa23ea64Affected 6b18662e239a032f908b7f6e164bdf7e2e0a32c9 to before 8b14bd0b500aec1458b51cb621c8e5fab3304260Affected 6b18662e239a032f908b7f6e164bdf7e2e0a32c9 to before 2d24d91b9f44620824fc37b766f7cae00ca32748Affected 6b18662e239a032f908b7f6e164bdf7e2e0a32c9 to before e01c1542379fb395e7da53706df598f38905dfbfAffected 6b18662e239a032f908b7f6e164bdf7e2e0a32c9 to before 8782b32ef867de7981bbe9e86ecb90e92e8780bdAffected 6b18662e239a032f908b7f6e164bdf7e2e0a32c9 to before aa08323fe18cb7cf95317ffa2d54ca1de8e74ebdAffected 6b18662e239a032f908b7f6e164bdf7e2e0a32c9 to before dcc14cfd7debe11b825cb077e75d91d2575b4cb8Affected
LinuxLinux	2.6.33Affected before 2.6.33Not affected 4.9.335 through 4.9.Not affected 4.14.301 through 4.14.Not affected 4.19.268 through 4.19.Not affected 5.4.226 through 5.4.Not affected 5.10.158 through 5.10.Not affected 5.15.82 through 5.15.Not affected 6.0.12 through 6.0.*Not affected 6.1 and laterNot affected

Product

Versions

LinuxLinux

6b18662e239a032f908b7f6e164bdf7e2e0a32c9 to before 0396227f4daf4792a6a8aaa3b7771dc25c4cd443Affected
6b18662e239a032f908b7f6e164bdf7e2e0a32c9 to before ded893965b895b2dccd3d1436d8d3daffa23ea64Affected
6b18662e239a032f908b7f6e164bdf7e2e0a32c9 to before 8b14bd0b500aec1458b51cb621c8e5fab3304260Affected
6b18662e239a032f908b7f6e164bdf7e2e0a32c9 to before 2d24d91b9f44620824fc37b766f7cae00ca32748Affected
6b18662e239a032f908b7f6e164bdf7e2e0a32c9 to before e01c1542379fb395e7da53706df598f38905dfbfAffected
6b18662e239a032f908b7f6e164bdf7e2e0a32c9 to before 8782b32ef867de7981bbe9e86ecb90e92e8780bdAffected
6b18662e239a032f908b7f6e164bdf7e2e0a32c9 to before aa08323fe18cb7cf95317ffa2d54ca1de8e74ebdAffected
6b18662e239a032f908b7f6e164bdf7e2e0a32c9 to before dcc14cfd7debe11b825cb077e75d91d2575b4cb8Affected

LinuxLinux

2.6.33Affected
before 2.6.33Not affected
4.9.335 through 4.9.*Not affected
4.14.301 through 4.14.*Not affected
4.19.268 through 4.19.*Not affected
5.4.226 through 5.4.*Not affected
5.10.158 through 5.10.*Not affected
5.15.82 through 5.15.*Not affected
6.0.12 through 6.0.*Not affected
6.1 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.