CVE-2022-49705

Source
https://nvd.nist.gov/vuln/detail/CVE-2022-49705
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-49705.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2022-49705
Downstream
Related
Published
2025-02-26T02:24:24Z
Modified
2025-10-21T10:56:56.092609Z
Severity
  • 5.5 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
9p: fix fid refcount leak in v9fs_vfs_atomic_open_dotl
Details

In the Linux kernel, the following vulnerability has been resolved:

9p: fix fid refcount leak in v9fsvfsatomicopendotl

We need to release directory fid if we fail halfway through open

This fixes fid leaking with xfstests generic 531

References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
6636b6dcc3db2258cd0585b8078c1c225c4b6dde
Fixed
22832ac3eb5be3f7168816a76b64c1284e12eb3c
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
6636b6dcc3db2258cd0585b8078c1c225c4b6dde
Fixed
8bc5412ba1a45edfd1e451874c483c26a097af2b
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
6636b6dcc3db2258cd0585b8078c1c225c4b6dde
Fixed
beca774fc51a9ba8abbc869cf0c3d965ff17cd24

Affected versions

v5.*

v5.10
v5.10-rc3
v5.10-rc4
v5.10-rc5
v5.10-rc6
v5.10-rc7
v5.11
v5.11-rc1
v5.11-rc2
v5.11-rc3
v5.11-rc4
v5.11-rc5
v5.11-rc6
v5.11-rc7
v5.12
v5.12-rc1
v5.12-rc1-dontuse
v5.12-rc2
v5.12-rc3
v5.12-rc4
v5.12-rc5
v5.12-rc6
v5.12-rc7
v5.12-rc8
v5.13
v5.13-rc1
v5.13-rc2
v5.13-rc3
v5.13-rc4
v5.13-rc5
v5.13-rc6
v5.13-rc7
v5.14
v5.14-rc1
v5.14-rc2
v5.14-rc3
v5.14-rc4
v5.14-rc5
v5.14-rc6
v5.14-rc7
v5.15
v5.15-rc1
v5.15-rc2
v5.15-rc3
v5.15-rc4
v5.15-rc5
v5.15-rc6
v5.15-rc7
v5.15.1
v5.15.10
v5.15.11
v5.15.12
v5.15.13
v5.15.14
v5.15.15
v5.15.16
v5.15.17
v5.15.18
v5.15.19
v5.15.2
v5.15.20
v5.15.21
v5.15.22
v5.15.23
v5.15.24
v5.15.25
v5.15.26
v5.15.27
v5.15.28
v5.15.29
v5.15.3
v5.15.30
v5.15.31
v5.15.32
v5.15.33
v5.15.34
v5.15.35
v5.15.36
v5.15.37
v5.15.38
v5.15.39
v5.15.4
v5.15.40
v5.15.41
v5.15.42
v5.15.43
v5.15.44
v5.15.45
v5.15.46
v5.15.47
v5.15.48
v5.15.49
v5.15.5
v5.15.50
v5.15.6
v5.15.7
v5.15.8
v5.15.9
v5.16
v5.16-rc1
v5.16-rc2
v5.16-rc3
v5.16-rc4
v5.16-rc5
v5.16-rc6
v5.16-rc7
v5.16-rc8
v5.17
v5.17-rc1
v5.17-rc2
v5.17-rc3
v5.17-rc4
v5.17-rc5
v5.17-rc6
v5.17-rc7
v5.17-rc8
v5.18
v5.18-rc1
v5.18-rc2
v5.18-rc3
v5.18-rc4
v5.18-rc5
v5.18-rc6
v5.18-rc7
v5.18.1
v5.18.2
v5.18.3
v5.18.4
v5.18.5
v5.18.6
v5.18.7
v5.19-rc1
v5.19-rc2

Database specific

vanir_signatures

[
    {
        "signature_version": "v1",
        "id": "CVE-2022-49705-21fa819d",
        "signature_type": "Line",
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "20475324165644902782668372723250877011",
                "104636636507546808032738107712463955143",
                "288656056277468338764889392948893365338",
                "338509435709482806610556291446418833039",
                "8060216476987345307146732366341902473",
                "311539395427443855068623312748723259713",
                "40523162206441226356749490432074796477",
                "168560700772695510428511562997521067879",
                "319337640016544021361006600300157981485",
                "25632074318895858880626863789140660558",
                "205561234200693782378332428084762887366",
                "159086914397037518440867558560530215087"
            ]
        },
        "target": {
            "file": "fs/9p/vfs_inode_dotl.c"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@22832ac3eb5be3f7168816a76b64c1284e12eb3c",
        "deprecated": false
    },
    {
        "signature_version": "v1",
        "id": "CVE-2022-49705-54c440ad",
        "signature_type": "Function",
        "digest": {
            "length": 2786.0,
            "function_hash": "116590867880278594707713935764196060869"
        },
        "target": {
            "file": "fs/9p/vfs_inode_dotl.c",
            "function": "v9fs_vfs_atomic_open_dotl"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@beca774fc51a9ba8abbc869cf0c3d965ff17cd24",
        "deprecated": false
    },
    {
        "signature_version": "v1",
        "id": "CVE-2022-49705-62e7e6cf",
        "signature_type": "Line",
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "20475324165644902782668372723250877011",
                "104636636507546808032738107712463955143",
                "288656056277468338764889392948893365338",
                "338509435709482806610556291446418833039",
                "8060216476987345307146732366341902473",
                "311539395427443855068623312748723259713",
                "40523162206441226356749490432074796477",
                "168560700772695510428511562997521067879",
                "319337640016544021361006600300157981485",
                "25632074318895858880626863789140660558",
                "205561234200693782378332428084762887366",
                "159086914397037518440867558560530215087"
            ]
        },
        "target": {
            "file": "fs/9p/vfs_inode_dotl.c"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8bc5412ba1a45edfd1e451874c483c26a097af2b",
        "deprecated": false
    },
    {
        "signature_version": "v1",
        "id": "CVE-2022-49705-95e50d79",
        "signature_type": "Line",
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "20475324165644902782668372723250877011",
                "104636636507546808032738107712463955143",
                "288656056277468338764889392948893365338",
                "338509435709482806610556291446418833039",
                "8060216476987345307146732366341902473",
                "311539395427443855068623312748723259713",
                "40523162206441226356749490432074796477",
                "168560700772695510428511562997521067879",
                "319337640016544021361006600300157981485",
                "25632074318895858880626863789140660558",
                "205561234200693782378332428084762887366",
                "159086914397037518440867558560530215087"
            ]
        },
        "target": {
            "file": "fs/9p/vfs_inode_dotl.c"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@beca774fc51a9ba8abbc869cf0c3d965ff17cd24",
        "deprecated": false
    },
    {
        "signature_version": "v1",
        "id": "CVE-2022-49705-e8eba555",
        "signature_type": "Function",
        "digest": {
            "length": 2750.0,
            "function_hash": "313107106910790636643181512300123102553"
        },
        "target": {
            "file": "fs/9p/vfs_inode_dotl.c",
            "function": "v9fs_vfs_atomic_open_dotl"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@22832ac3eb5be3f7168816a76b64c1284e12eb3c",
        "deprecated": false
    },
    {
        "signature_version": "v1",
        "id": "CVE-2022-49705-f107c1fb",
        "signature_type": "Function",
        "digest": {
            "length": 2786.0,
            "function_hash": "116590867880278594707713935764196060869"
        },
        "target": {
            "file": "fs/9p/vfs_inode_dotl.c",
            "function": "v9fs_vfs_atomic_open_dotl"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8bc5412ba1a45edfd1e451874c483c26a097af2b",
        "deprecated": false
    }
]

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
5.11.0
Fixed
5.15.51
Type
ECOSYSTEM
Events
Introduced
5.16.0
Fixed
5.18.8