CVE-2022-49927

nfs4: Fix kmemleak when allocate slot failed

State: Published
Severity: 5.5 Medium
Published: May 1, 2025
Updated: May 11, 2026
Reserved: May 1, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

nfs4: Fix kmemleak when allocate slot failed

If one of the slot allocate failed, should cleanup all the other allocated slots, otherwise, the allocated slots will leak:

unreferenced object 0xffff8881115aa100 (size 64): comm ""mount.nfs"", pid 679, jiffies 4294744957 (age 115.037s) hex dump (first 32 bytes): 00 cc 19 73 81 88 ff ff 00 a0 5a 11 81 88 ff ff ...s......Z..... 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ backtrace: [<000000007a4c434a>] nfs4_find_or_create_slot+0x8e/0x130 [<000000005472a39c>] nfs4_realloc_slot_table+0x23f/0x270 [<00000000cd8ca0eb>] nfs40_init_client+0x4a/0x90 [<00000000128486db>] nfs4_init_client+0xce/0x270 [<000000008d2cacad>] nfs4_set_client+0x1a2/0x2b0 [<000000000e593b52>] nfs4_create_server+0x300/0x5f0 [<00000000e4425dd2>] nfs4_try_get_tree+0x65/0x110 [<00000000d3a6176f>] vfs_get_tree+0x41/0xf0 [<0000000016b5ad4c>] path_mount+0x9b3/0xdd0 [<00000000494cae71>] __x64_sys_mount+0x190/0x1d0 [<000000005d56bdec>] do_syscall_64+0x35/0x80 [<00000000687c9ae4>] entry_SYSCALL_64_after_hwframe+0x46/0xb0

Scores

CVSS	Score	Vector	Source
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

CWE-401 Missing Release of Memory after Effective Lifetime

Affected Products

Product	Versions
LinuxLinux	abf79bb341bf52f75f295b850abdf5f78f584311 to before 84b5cb476903003ae9ca88f32b57ff0eaefa6d4cAffected abf79bb341bf52f75f295b850abdf5f78f584311 to before aae35a0c8a775fa4afa6a4e7dab3f936f1f89bbbAffected abf79bb341bf52f75f295b850abdf5f78f584311 to before 86ce0e93cf6fb4d0c447323ac66577c642628b9dAffected abf79bb341bf52f75f295b850abdf5f78f584311 to before 925cb538bd5851154602818dc80bf4b4d924c127Affected abf79bb341bf52f75f295b850abdf5f78f584311 to before 45aea4fbf61e205649c29200726b9f45c1718a67Affected abf79bb341bf52f75f295b850abdf5f78f584311 to before 24641993a7dce6b1628645f4e1d97ca06c9f765dAffected abf79bb341bf52f75f295b850abdf5f78f584311 to before db333ae981fb8843c383aa7dbf62cc682597d401Affected abf79bb341bf52f75f295b850abdf5f78f584311 to before 7e8436728e22181c3f12a5dbabd35ed3a8b8c593Affected
LinuxLinux	3.12Affected before 3.12Not affected 4.9.333 through 4.9.Not affected 4.14.299 through 4.14.Not affected 4.19.265 through 4.19.Not affected 5.4.224 through 5.4.Not affected 5.10.154 through 5.10.Not affected 5.15.78 through 5.15.Not affected 6.0.8 through 6.0.*Not affected 6.1 and laterNot affected

Product

Versions

LinuxLinux

abf79bb341bf52f75f295b850abdf5f78f584311 to before 84b5cb476903003ae9ca88f32b57ff0eaefa6d4cAffected
abf79bb341bf52f75f295b850abdf5f78f584311 to before aae35a0c8a775fa4afa6a4e7dab3f936f1f89bbbAffected
abf79bb341bf52f75f295b850abdf5f78f584311 to before 86ce0e93cf6fb4d0c447323ac66577c642628b9dAffected
abf79bb341bf52f75f295b850abdf5f78f584311 to before 925cb538bd5851154602818dc80bf4b4d924c127Affected
abf79bb341bf52f75f295b850abdf5f78f584311 to before 45aea4fbf61e205649c29200726b9f45c1718a67Affected
abf79bb341bf52f75f295b850abdf5f78f584311 to before 24641993a7dce6b1628645f4e1d97ca06c9f765dAffected
abf79bb341bf52f75f295b850abdf5f78f584311 to before db333ae981fb8843c383aa7dbf62cc682597d401Affected
abf79bb341bf52f75f295b850abdf5f78f584311 to before 7e8436728e22181c3f12a5dbabd35ed3a8b8c593Affected

LinuxLinux

3.12Affected
before 3.12Not affected
4.9.333 through 4.9.*Not affected
4.14.299 through 4.14.*Not affected
4.19.265 through 4.19.*Not affected
5.4.224 through 5.4.*Not affected
5.10.154 through 5.10.*Not affected
5.15.78 through 5.15.*Not affected
6.0.8 through 6.0.*Not affected
6.1 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.