← Back

CVE-2022-49020

nvd nist
Published: Oct 21, 2024Modified: Oct 24, 2024

JSON object

Loading...
5.5
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Exploitability: 1.8 / Impact: 3.6
Source: NVD

Description

In the Linux kernel, the following vulnerability has been resolved: net/9p: Fix a potential socket leak in p9_socket_open Both p9_fd_create_tcp() and p9_fd_create_unix() will call p9_socket_open(). If the creation of p9_trans_fd fails, p9_fd_create_tcp() and p9_fd_create_unix() will return an error directly instead of releasing the cscoket, which will result in a socket leak. This patch adds sock_release() to fix the leak issue.

Affected (14)

Products: Linux: Linux Kernel
1 product
Linux Kernel
Configuration A
14 vulnerable
Vulnerable SoftwareAffected Versions
Linux
From 2.6.33 to 4.9.335
From 4.10 to 4.14.301
From 4.15 to 4.19.268
From 4.20 to 5.4.226
From 5.11 to 5.15.82
From 5.16 to 6.0.12
From 5.5 to 5.10.158
Version 6.1 rc1
Version 6.1 rc2
Version 6.1 rc3
Version 6.1 rc4
Version 6.1 rc5
Version 6.1 rc6
Version 6.1 rc7

References (8)

Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Patch

Timeline

No history available yet.