CVE-2022-49362

See a problem?
Please try reporting it to the source first.
Source
https://nvd.nist.gov/vuln/detail/CVE-2022-49362
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-49362.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2022-49362
Downstream
Related
Published
2025-02-26T02:11:09Z
Modified
2025-10-21T09:56:10.579215Z
Severity
  • 7.8 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
NFSD: Fix potential use-after-free in nfsd_file_put()
Details

In the Linux kernel, the following vulnerability has been resolved:

NFSD: Fix potential use-after-free in nfsdfileput()

nfsdfileputnoref() can free @nf, so don't dereference @nf immediately upon return from nfsdfileputnoref().

References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
9862064ca81f9b9da8ebe26c86cf2b10c293ba1a
Fixed
ada1757b259f353cade47037ee0a0249b4cddad3
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
a98e5b3d958ac697aafb3d077eb2cca4a731b7ee
Fixed
261eabe19cb28e4a8587a4442d257b543d7c2d57
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
999397926ab3f78c7d1235cc4ca6e3c89d2769bf
Fixed
333dcc94ebf53f79f3dc0e7a7c16700bc7ff7e57
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
999397926ab3f78c7d1235cc4ca6e3c89d2769bf
Fixed
b6c71c66b0ad8f2b59d9bc08c7a5079b110bec01

Affected versions

v5.*

v5.17
v5.17-rc7
v5.17-rc8
v5.18
v5.18-rc1
v5.18-rc2
v5.18-rc3
v5.18-rc4
v5.18-rc5
v5.18-rc6
v5.18-rc7
v5.18.1
v5.18.2
v5.18.3

Database specific

vanir_signatures

[
    {
        "id": "CVE-2022-49362-18c55cd1",
        "target": {
            "file": "fs/nfsd/filecache.c"
        },
        "signature_version": "v1",
        "digest": {
            "line_hashes": [
                "195978951889637051432302921178836337623",
                "201996253118163209490859430212950310669",
                "232766567739863176289664040401316109013",
                "260019569347769644614514093720939837783",
                "1079244209707115408943919000178828236",
                "290733767538473428574169704358512074862",
                "323372616105862633199552423850569220140",
                "148052045388343103440263307524407328322"
            ],
            "threshold": 0.9
        },
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b6c71c66b0ad8f2b59d9bc08c7a5079b110bec01",
        "signature_type": "Line"
    },
    {
        "id": "CVE-2022-49362-2b63a1fa",
        "target": {
            "function": "nfsd_file_put",
            "file": "fs/nfsd/filecache.c"
        },
        "signature_version": "v1",
        "digest": {
            "length": 369.0,
            "function_hash": "79086916197750436525032112364740534789"
        },
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ada1757b259f353cade47037ee0a0249b4cddad3",
        "signature_type": "Function"
    },
    {
        "id": "CVE-2022-49362-3054cb7e",
        "target": {
            "function": "nfsd_file_put",
            "file": "fs/nfsd/filecache.c"
        },
        "signature_version": "v1",
        "digest": {
            "length": 369.0,
            "function_hash": "79086916197750436525032112364740534789"
        },
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@261eabe19cb28e4a8587a4442d257b543d7c2d57",
        "signature_type": "Function"
    },
    {
        "id": "CVE-2022-49362-44f2b67f",
        "target": {
            "file": "fs/nfsd/filecache.c"
        },
        "signature_version": "v1",
        "digest": {
            "line_hashes": [
                "195978951889637051432302921178836337623",
                "201996253118163209490859430212950310669",
                "232766567739863176289664040401316109013",
                "260019569347769644614514093720939837783",
                "1079244209707115408943919000178828236",
                "290733767538473428574169704358512074862",
                "323372616105862633199552423850569220140",
                "148052045388343103440263307524407328322"
            ],
            "threshold": 0.9
        },
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ada1757b259f353cade47037ee0a0249b4cddad3",
        "signature_type": "Line"
    },
    {
        "id": "CVE-2022-49362-451d150b",
        "target": {
            "file": "fs/nfsd/filecache.c"
        },
        "signature_version": "v1",
        "digest": {
            "line_hashes": [
                "195978951889637051432302921178836337623",
                "201996253118163209490859430212950310669",
                "232766567739863176289664040401316109013",
                "260019569347769644614514093720939837783",
                "1079244209707115408943919000178828236",
                "290733767538473428574169704358512074862",
                "323372616105862633199552423850569220140",
                "148052045388343103440263307524407328322"
            ],
            "threshold": 0.9
        },
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@333dcc94ebf53f79f3dc0e7a7c16700bc7ff7e57",
        "signature_type": "Line"
    },
    {
        "id": "CVE-2022-49362-bb7e7d83",
        "target": {
            "file": "fs/nfsd/filecache.c"
        },
        "signature_version": "v1",
        "digest": {
            "line_hashes": [
                "195978951889637051432302921178836337623",
                "201996253118163209490859430212950310669",
                "232766567739863176289664040401316109013",
                "260019569347769644614514093720939837783",
                "1079244209707115408943919000178828236",
                "290733767538473428574169704358512074862",
                "323372616105862633199552423850569220140",
                "148052045388343103440263307524407328322"
            ],
            "threshold": 0.9
        },
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@261eabe19cb28e4a8587a4442d257b543d7c2d57",
        "signature_type": "Line"
    },
    {
        "id": "CVE-2022-49362-bfef74e3",
        "target": {
            "function": "nfsd_file_put",
            "file": "fs/nfsd/filecache.c"
        },
        "signature_version": "v1",
        "digest": {
            "length": 354.0,
            "function_hash": "20523471411619575533273737507117105045"
        },
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@333dcc94ebf53f79f3dc0e7a7c16700bc7ff7e57",
        "signature_type": "Function"
    },
    {
        "id": "CVE-2022-49362-c7dd286f",
        "target": {
            "function": "nfsd_file_put",
            "file": "fs/nfsd/filecache.c"
        },
        "signature_version": "v1",
        "digest": {
            "length": 369.0,
            "function_hash": "79086916197750436525032112364740534789"
        },
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b6c71c66b0ad8f2b59d9bc08c7a5079b110bec01",
        "signature_type": "Function"
    }
]

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
5.18.0
Fixed
5.18.4