CVE-2022-49768

9p: trans_fd/p9_conn_cancel: drop client lock earlier

State: Published
Severity: 7.5 High
Published: May 1, 2025
Updated: Aug 5, 2026
Reserved: Apr 16, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

9p: trans_fd/p9_conn_cancel: drop client lock earlier

syzbot reported a double-lock here and we no longer need this lock after requests have been moved off to local list: just drop the lock earlier.

Scores

CVSS	Score	Vector	Source
3.1	7.5 High	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	eb1ca07f4343b4e58b97e792a85d5ba1ba103f5d to before 82825dbf393f7c7979d462f9609a15bde8092b3fAffected 4cd195263e420311d31451cc053fde8037f326f1 to before e3031280fe4eaf61a09e60823331f81f321be8e1Affected 9f476d7c540cb57556d3cc7e78704e6cd5100f5f to before fec1406f5e7ab20b71f6d231792b0040e3300aafAffected 9f476d7c540cb57556d3cc7e78704e6cd5100f5f to before 96760723aae1b45f733f702abb4333137143909fAffected 9f476d7c540cb57556d3cc7e78704e6cd5100f5f to before f14858bc77c567e089965962877ee726ffad0556Affected 9f476d7c540cb57556d3cc7e78704e6cd5100f5f to before a4f1a01b2e81378fce9ca528d4d8a049e4b58fcdAffected 9f476d7c540cb57556d3cc7e78704e6cd5100f5f to before 612c977f5d481f551d03d83d0aef588845c1300cAffected 9f476d7c540cb57556d3cc7e78704e6cd5100f5f to before 52f1c45dde9136f964d63a77d19826c8a74e2c7fAffected 91ca7c5644c370dc5132b1db1aea81416a4b2181Affected 4.9.127 to before 4.9.334Affected 4.14.70 to before 4.14.300Affected 4.18.8 to before 4.19Affected
LinuxLinux	4.19Affected before 4.19Not affected 4.9.334 through 4.9.Not affected 4.14.300 through 4.14.Not affected 4.19.267 through 4.19.Not affected 5.4.225 through 5.4.Not affected 5.10.156 through 5.10.Not affected 5.15.80 through 5.15.Not affected 6.0.10 through 6.0.*Not affected 6.1 and laterNot affected

Product

Versions

LinuxLinux

eb1ca07f4343b4e58b97e792a85d5ba1ba103f5d to before 82825dbf393f7c7979d462f9609a15bde8092b3fAffected
4cd195263e420311d31451cc053fde8037f326f1 to before e3031280fe4eaf61a09e60823331f81f321be8e1Affected
9f476d7c540cb57556d3cc7e78704e6cd5100f5f to before fec1406f5e7ab20b71f6d231792b0040e3300aafAffected
9f476d7c540cb57556d3cc7e78704e6cd5100f5f to before 96760723aae1b45f733f702abb4333137143909fAffected
9f476d7c540cb57556d3cc7e78704e6cd5100f5f to before f14858bc77c567e089965962877ee726ffad0556Affected
9f476d7c540cb57556d3cc7e78704e6cd5100f5f to before a4f1a01b2e81378fce9ca528d4d8a049e4b58fcdAffected
9f476d7c540cb57556d3cc7e78704e6cd5100f5f to before 612c977f5d481f551d03d83d0aef588845c1300cAffected
9f476d7c540cb57556d3cc7e78704e6cd5100f5f to before 52f1c45dde9136f964d63a77d19826c8a74e2c7fAffected
91ca7c5644c370dc5132b1db1aea81416a4b2181Affected
4.9.127 to before 4.9.334Affected
4.14.70 to before 4.14.300Affected
4.18.8 to before 4.19Affected

LinuxLinux

4.19Affected
before 4.19Not affected
4.9.334 through 4.9.*Not affected
4.14.300 through 4.14.*Not affected
4.19.267 through 4.19.*Not affected
5.4.225 through 5.4.*Not affected
5.10.156 through 5.10.*Not affected
5.15.80 through 5.15.*Not affected
6.0.10 through 6.0.*Not affected
6.1 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.