CVE-2022-49704: 9p: fix fid refcount leak in v9fs_vfs_get_link
Published Feb 26, 2025
·Updated
In the Linux kernel, the following vulnerability has been resolved:
9p: fix fid refcount leak in v9fsvfsgetlink
we check for protocol version later than required, after a fid has been obtained. Just move the version check earlier.
Affected Software
6 affected components
Linux Linux kernel>=5.11<5.15.51
Linux Linux kernel>=5.16<5.18.8
Linux Linux kernel=5.19-rc1
Linux Linux kernel=5.19-rc2
Linux Linux kernel=5.19-rc3
Linux Kernel
Remediation
Event History
Feb 26, 2025
CVE Published
via MITRE·02:24 AM
Data Sourced
via MITRE·02:24 AM
Description
Data Sourced
via NVD·07:01 AM
RemedyDescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2022-49704?
CVE-2022-49704 has been classified with a low severity due to its limited impact on system security.
2
How do I fix CVE-2022-49704?
To fix CVE-2022-49704, update the Linux kernel to the latest version that addresses the vulnerability.
3
What systems are affected by CVE-2022-49704?
CVE-2022-49704 affects the Linux kernel, specifically in the handling of fid references in the v9fs protocol.
4
What vulnerabilities are similar to CVE-2022-49704?
Similar vulnerabilities to CVE-2022-49704 may involve refcount leaks in other protocols or components of the Linux kernel.
5
When was CVE-2022-49704 published?
CVE-2022-49704 was published on December 1, 2022.