CVE-2022-49704

9p: fix fid refcount leak in v9fs_vfs_get_link

State: Published
Severity: 5.5 Medium
Published: Feb 26, 2025
Updated: May 11, 2026
Reserved: Feb 26, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

9p: fix fid refcount leak in v9fs_vfs_get_link

we check for protocol version later than required, after a fid has been obtained. Just move the version check earlier.

Scores

CVSS	Score	Vector	Source
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	6636b6dcc3db2258cd0585b8078c1c225c4b6dde to before f0126bcaee81dabc1926012126aa74caa03a4c6eAffected 6636b6dcc3db2258cd0585b8078c1c225c4b6dde to before e7b6d622bd812013eb39c8f4cd65b7ee8ede1e02Affected 6636b6dcc3db2258cd0585b8078c1c225c4b6dde to before e5690f263208c5abce7451370b7786eb25b405ebAffected
LinuxLinux	5.11Affected before 5.11Not affected 5.15.51 through 5.15.Not affected 5.18.8 through 5.18.Not affected 5.19 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.