What is the severity of CVE-2022-49281?

CVE-2022-49281 has been classified as a medium-severity vulnerability affecting the Linux kernel.

How do I fix CVE-2022-49281?

To fix CVE-2022-49281, it is recommended to update the Linux kernel to the patched version available from your distribution.

What component is affected by CVE-2022-49281?

CVE-2022-49281 affects the Linux CIFS (Common Internet File System) implementation within the Linux kernel.

Can CVE-2022-49281 lead to data leakage?

Yes, CVE-2022-49281 can potentially lead to data leakage by improperly managing handles for cached directories in multiuser scenarios.

Is CVE-2022-49281 present in all Linux kernel versions?

CVE-2022-49281 is not present in all Linux kernel versions; it is specific to versions prior to the fix which addresses the multiuser caching issue.

Vulnerability/
CVE-2022-49281

26/2/2025

CVE-2022-49281: cifs: fix handlecache and multiuser

First published: Wed Feb 26 2025(Updated: )

In the Linux kernel, the following vulnerability has been resolved: cifs: fix handlecache and multiuser In multiuser each individual user has their own tcon structure for the share and thus their own handle for a cached directory. When we umount such a share we much make sure to release the pinned down dentry for each such tcon and not just the master tcon. Otherwise we will get nasty warnings on umount that dentries are still in use: [ 3459.590047] BUG: Dentry 00000000115c6f41{i=12000000019d95,n=/} still in use\ (2) [unmount of cifs cifs] ... [ 3459.590492] Call Trace: [ 3459.590500] d_walk+0x61/0x2a0 [ 3459.590518] ? shrink_lock_dentry.part.0+0xe0/0xe0 [ 3459.590526] shrink_dcache_for_umount+0x49/0x110 [ 3459.590535] generic_shutdown_super+0x1a/0x110 [ 3459.590542] kill_anon_super+0x14/0x30 [ 3459.590549] cifs_kill_sb+0xf5/0x104 [cifs] [ 3459.590773] deactivate_locked_super+0x36/0xa0 [ 3459.590782] cleanup_mnt+0x131/0x190 [ 3459.590789] task_work_run+0x5c/0x90 [ 3459.590798] exit_to_user_mode_loop+0x151/0x160 [ 3459.590809] exit_to_user_mode_prepare+0x83/0xd0 [ 3459.590818] syscall_exit_to_user_mode+0x12/0x30 [ 3459.590828] do_syscall_64+0x48/0x90 [ 3459.590833] entry_SYSCALL_64_after_hwframe+0x44/0xae

Credit: 416baaa9-dc9f-4396-8d5f-8c081fb06d67

Affected Software	Affected Version	How to fix
Linux Kernel
Linux CIFS

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the severity of CVE-2022-49281?
CVE-2022-49281 has been classified as a medium-severity vulnerability affecting the Linux kernel.
How do I fix CVE-2022-49281?
To fix CVE-2022-49281, it is recommended to update the Linux kernel to the patched version available from your distribution.
What component is affected by CVE-2022-49281?
CVE-2022-49281 affects the Linux CIFS (Common Internet File System) implementation within the Linux kernel.
Can CVE-2022-49281 lead to data leakage?
Yes, CVE-2022-49281 can potentially lead to data leakage by improperly managing handles for cached directories in multiuser scenarios.
Is CVE-2022-49281 present in all Linux kernel versions?
CVE-2022-49281 is not present in all Linux kernel versions; it is specific to versions prior to the fix which addresses the multiuser caching issue.

collector/mitre-cve
source/MITRE
collector/nvd-api
source/NVD
agent/first-publish-date
agent/type
agent/title
agent/references
agent/author
agent/source
agent/description
agent/event
agent/last-modified-date
agent/softwarecombine
agent/tags
agent/guess-ai
agent/software-canonical-lookup
agent/software-canonical-lookup-request
vendor/linux
canonical/linux kernel
canonical/linux cifs