CVE-2022-50460: cifs: Fix xid leak in cifs_flock()
In the Linux kernel, the following vulnerability has been resolved:
cifs: Fix xid leak in cifsflock()
If not flock, before return -ENOLCK, should free the xid, otherwise, the xid will be leaked.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2022-50460?
CVE-2022-50460 is considered a moderate severity vulnerability due to its potential impact on resource management in the Linux kernel.
What does CVE-2022-50460 affect?
CVE-2022-50460 affects the Linux kernel, specifically the CIFS (Common Internet File System) implementation.
How do I fix CVE-2022-50460?
To fix CVE-2022-50460, update your Linux kernel to the latest stable version that includes the patch for this vulnerability.
What is the nature of the issue in CVE-2022-50460?
CVE-2022-50460 involves an xid leak occurring in the cifs_flock() function when returning -ENOLCK without freeing the xid.
Is CVE-2022-50460 exploitable in the wild?
There have been no confirmed reports of exploitation of CVE-2022-50460 in the wild as of now.