CVE-2022-49362: NFSD: Fix potential use-after-free in nfsd_file_put()
In the Linux kernel, the following vulnerability has been resolved:
NFSD: Fix potential use-after-free in nfsdfileput()
nfsdfileputnoref() can free @nf, so don't dereference @nf immediately upon return from nfsdfileputnoref().
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.18.5-1 - Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.107-1Fixed in 6.12.115-2Fixed in 7.2.12-1Fixed in 7.2.15-1
Event History
Frequently Asked Questions
What is the severity of CVE-2022-49362?
CVE-2022-49362 has a moderate severity rating due to potential use-after-free vulnerabilities in the Linux kernel.
What does CVE-2022-49362 affect?
CVE-2022-49362 affects certain versions of the Linux kernel, particularly those between 5.18 and 5.19-rc1.
How do I fix CVE-2022-49362?
To fix CVE-2022-49362, upgrade to a patched version of the Linux kernel that addresses this vulnerability.
What are the symptoms of CVE-2022-49362 exploitation?
Exploitation of CVE-2022-49362 could lead to crashes or potentially execution of arbitrary code due to improper memory handling.
Who is affected by CVE-2022-49362?
Users and administrators of systems running vulnerable versions of the Linux kernel are affected by CVE-2022-49362.