CVE-2022-50114: net: 9p: fix refcount leak in p9_read_work() error handling
Published Jun 18, 2025
·Updated
In the Linux kernel, the following vulnerability has been resolved:
net: 9p: fix refcount leak in p9readwork() error handling
p9reqput need to be called when m->rreq->rc.sdata is NULL to avoid temporary refcount leak.
[Dominique: commit wording adjustments, p9reqput argument fixes for rebase]
Affected Software
4 affected components
Linux Linux kernel
Linux Linux kernel>=4.19.57<5.15.61
Linux Linux kernel>=5.16<5.18.18
Linux Linux kernel>=5.19<5.19.2
Event History
Jun 18, 2025
CVE Published
via MITRE·11:02 AM
Data Sourced
via MITRE·11:02 AM
Description
Data Sourced
via NVD·11:15 AM
RemedyDescriptionSeverityAffected Software
Frequently Asked Questions
1
What level of access does an attacker need to exploit this issue?
The CVSS vector indicates that exploitation requires local access and low privileges. No user interaction is required.
2
What is the likely impact of successful exploitation?
The reported impact is availability only, with high availability impact in the CVSS vector. Confidentiality and integrity impact are listed as none.
3
What condition triggers the refcount leak?
The leak occurs in p9_read_work() error handling when m->rreq->rc.sdata is NULL and p9_req_put is not called.