CVE-2022-50114: net: 9p: fix refcount leak in p9_read_work() error handling

Q: What level of access does an attacker need to exploit this issue?

The CVSS vector indicates that exploitation requires local access and low privileges. No user interaction is required.

Q: What is the likely impact of successful exploitation?

The reported impact is availability only, with high availability impact in the CVSS vector. Confidentiality and integrity impact are listed as none.

Q: What condition triggers the refcount leak?

The leak occurs in p9_read_work() error handling when m->rreq->rc.sdata is NULL and p9_req_put is not called.

Published Jun 18, 2025

Updated

In the Linux kernel, the following vulnerability has been resolved:

net: 9p: fix refcount leak in p9readwork() error handling

p9reqput need to be called when m->rreq->rc.sdata is NULL to avoid temporary refcount leak.

[Dominique: commit wording adjustments, p9reqput argument fixes for rebase]

Affected Software

4 affected components

Linux Linux kernel

Linux Linux kernel>=4.19.57<5.15.61

Linux Linux kernel>=5.16<5.18.18

Linux Linux kernel>=5.19<5.19.2

Event History

Jun 18, 2025

CVE Published

via MITRE·11:02 AM

Data Sourced

via MITRE·11:02 AM

Description

Data Sourced

via NVD·11:15 AM

RemedyDescriptionSeverityAffected Software

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

The CVSS vector indicates that exploitation requires local access and low privileges. No user interaction is required.

What is the likely impact of successful exploitation?

The reported impact is availability only, with high availability impact in the CVSS vector. Confidentiality and integrity impact are listed as none.

What condition triggers the refcount leak?

The leak occurs in p9_read_work() error handling when m->rreq->rc.sdata is NULL and p9_req_put is not called.

CVE-2022-50114: net: 9p: fix refcount leak in p9_read_work() error handling

Affected Software

Event History

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

What is the likely impact of successful exploitation?

What condition triggers the refcount leak?

Company

Resources

Contact

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

What is the likely impact of successful exploitation?

What condition triggers the refcount leak?