Riskcovery

CVE-2022-49905

net/smc: Fix possible leaked pernet namespace in smc_init()

State
Published
Severity
7.8 High
Published
May 1, 2025
Updated
Oct 15, 2026
Reserved
May 1, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

net/smc: Fix possible leaked pernet namespace in smc_init()

In smc_init(), register_pernet_subsys(&smc_net_stat_ops) is called without any error handling. If it fails, registering of &smc_net_ops won't be reverted. And if smc_nl_init() fails, &smc_net_stat_ops itself won't be reverted.

This leaves wild ops in subsystem linkedlist and when another module tries to call register_pernet_operations() it triggers page fault:

BUG: unable to handle page fault for address: fffffbfff81b964c RIP: 0010:register_pernet_operations+0x1b9/0x5f0 Call Trace: <TASK> register_pernet_subsys+0x29/0x40 ebtables_init+0x58/0x1000 [ebtables] ...

Scores

CVSSScoreVectorSource
3.17.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 194730a9beb52d2b030ea45e12d94868d4a0e6fd to before 61defd6450a9ef4a1487090449999b0fd83518efAffected
  • 194730a9beb52d2b030ea45e12d94868d4a0e6fd to before c97daf836f7caf81d3144b8cd2b2a51f9bc3bd09Affected
  • 194730a9beb52d2b030ea45e12d94868d4a0e6fd to before 62ff373da2534534c55debe6c724c7fe14adb97fAffected
LinuxLinux
  • 5.14Affected
  • before 5.14Not affected
  • 5.15.78 through 5.15.*Not affected
  • 6.0.8 through 6.0.*Not affected
  • 6.1 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.