Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: cifs: Fix connections leak when tlink setup failed If the tlink setup failed, lost to put the connections, then the module refcnt leak since the cifsd kthread not exit. Also leak the fscache info, and for next mount with fsc, it will print the follow errors: CIFS: Cache volume key already in use (cifs,127.0.0.1:445,TEST) Let's check the result of tlink setup, and do some cleanup.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux Kernel | >= 5.0, < 5.15.81 |
Related Weaknesses (CWE)
References
- https://git.kernel.org/stable/c/0a087842d10b5daa123ee5291e386cdd78413705Patch
- https://git.kernel.org/stable/c/1dcdf5f5b2137185cbdd5385f29949ab3da4f00cPatch
- https://git.kernel.org/stable/c/a9059e338fc000c0b87d8cf29e93c74fd703212ePatch
FAQ
What is CVE-2022-49822?
CVE-2022-49822 is a vulnerability with a CVSS score of 5.5 (MEDIUM). In the Linux kernel, the following vulnerability has been resolved: cifs: Fix connections leak when tlink setup failed If the tlink setup failed, lost to put the connections, then the module refcnt ...
How severe is CVE-2022-49822?
CVE-2022-49822 has been rated MEDIUM with a CVSS base score of 5.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2022-49822?
Check the references section above for vendor advisories and patch information. Affected products include: Linux Linux Kernel.