CVE-2022-50351

cifs: Fix xid leak in cifs_create()

State: Published
Severity: 5.5 Medium
Published: Sep 16, 2025
Updated: May 11, 2026
Reserved: Sep 16, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

cifs: Fix xid leak in cifs_create()

If the cifs already shutdown, we should free the xid before return, otherwise, the xid will be leaked.

Scores

CVSS	Score	Vector	Source
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

CWE-401 Missing Release of Memory after Effective Lifetime

Affected Products

Product	Versions
LinuxLinux	087f757b0129850c99cc9116df4909dac1bce871 to before 593d877c39aa9f3fe1a4b5b022492886d7d700ecAffected 087f757b0129850c99cc9116df4909dac1bce871 to before 92aa09c86ef297976a3c27c6574c0839418dc2c4Affected 087f757b0129850c99cc9116df4909dac1bce871 to before fee0fb1f15054bb6a0ede452acb42da5bef4d587Affected
LinuxLinux	5.13Affected before 5.13Not affected 5.15.76 through 5.15.Not affected 6.0.6 through 6.0.Not affected 6.1 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.