Riskcovery

CVE-2022-49938

cifs: fix small mempool leak in SMB2_negotiate()

State
Published
Severity
Not scored
Published
Jun 18, 2025
Updated
May 23, 2026
Reserved
May 1, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

cifs: fix small mempool leak in SMB2_negotiate()

In some cases of failure (dialect mismatches) in SMB2_negotiate(), after the request is sent, the checks would return -EIO when they should be rather setting rc = -EIO and jumping to neg_exit to free the response buffer from mempool.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 9764c02fcbad40001fd3f63558d918e4d519bb75 to before 9e3c9efa7caf16e5acc05eab5e4d0a714e1610b0Affected
  • 9764c02fcbad40001fd3f63558d918e4d519bb75 to before 38a6b469bf22f153282fbe7d702a24e9eb43f50eAffected
  • 9764c02fcbad40001fd3f63558d918e4d519bb75 to before 27893dfc1285f80f80f46b3b8c95f5d15d2e66d0Affected
  • 1ae6f05d4204d3a128bb9ba2c42e2a6c4ac687f1Affected
  • 4.13.5 to before 4.14Affected
LinuxLinux
  • 4.14Affected
  • before 4.14Not affected
  • 5.15.66 through 5.15.*Not affected
  • 5.19.8 through 5.19.*Not affected
  • 6.0 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.