In the Linux kernel, the following vulnerability has been resolved:
cifs: fix small mempool leak in SMB2_negotiate()
In some cases of failure (dialect mismatches) in SMB2negotiate(), after the request is sent, the checks would return -EIO when they should be rather setting rc = -EIO and jumping to negexit to free the response buffer from mempool.
[
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@38a6b469bf22f153282fbe7d702a24e9eb43f50e",
"target": {
"file": "fs/cifs/smb2pdu.c"
},
"digest": {
"line_hashes": [
"33918404259266090929434612204012420580",
"179766920619453513900637771083960352222",
"255065132884668925564995524996760571905",
"252270891775282616722319502464702755116",
"200146462114456435422342477255347467703",
"241123358240045142917940958276961299675",
"276539759233991772192931402811553160576",
"290665178936789556075577408579508753792",
"77437395479110470025542837072841517163",
"322846489758192429782898345414565001408",
"185840723019934783451910799183674322686",
"16539979691884154966662205841895610062",
"337270512191619370474364009849676188830",
"241123358240045142917940958276961299675",
"276539759233991772192931402811553160576",
"297332144854859576311872660704319472569",
"177553823447914341816532519381482825353",
"107215011125127315114534242837815549623",
"100327130374790202853089896157812353247",
"261907981229978607161837600701323034748",
"189971122979228702250909911053272813682",
"98749409264732122467436547077516304620",
"110768111865204674784414260117903389281",
"53693861520495169634986598506609612915",
"282510825521840392361751752929333193271",
"112542222150427551212819801827523399142",
"220738389666187279830391767972360940033"
],
"threshold": 0.9
},
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1",
"id": "CVE-2022-49938-34ea6d84"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@27893dfc1285f80f80f46b3b8c95f5d15d2e66d0",
"target": {
"function": "SMB2_negotiate",
"file": "fs/cifs/smb2pdu.c"
},
"digest": {
"function_hash": "197634093492626532720285524040290531841",
"length": 6356.0
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1",
"id": "CVE-2022-49938-56f54c55"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9e3c9efa7caf16e5acc05eab5e4d0a714e1610b0",
"target": {
"function": "SMB2_negotiate",
"file": "fs/cifs/smb2pdu.c"
},
"digest": {
"function_hash": "105557284898510869762910440275542410189",
"length": 6296.0
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1",
"id": "CVE-2022-49938-9f2338ab"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@38a6b469bf22f153282fbe7d702a24e9eb43f50e",
"target": {
"function": "SMB2_negotiate",
"file": "fs/cifs/smb2pdu.c"
},
"digest": {
"function_hash": "197634093492626532720285524040290531841",
"length": 6356.0
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1",
"id": "CVE-2022-49938-cbd35764"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9e3c9efa7caf16e5acc05eab5e4d0a714e1610b0",
"target": {
"file": "fs/cifs/smb2pdu.c"
},
"digest": {
"line_hashes": [
"33918404259266090929434612204012420580",
"179766920619453513900637771083960352222",
"255065132884668925564995524996760571905",
"252270891775282616722319502464702755116",
"200146462114456435422342477255347467703",
"241123358240045142917940958276961299675",
"276539759233991772192931402811553160576",
"290665178936789556075577408579508753792",
"77437395479110470025542837072841517163",
"322846489758192429782898345414565001408",
"185840723019934783451910799183674322686",
"16539979691884154966662205841895610062",
"337270512191619370474364009849676188830",
"241123358240045142917940958276961299675",
"276539759233991772192931402811553160576",
"297332144854859576311872660704319472569",
"177553823447914341816532519381482825353",
"107215011125127315114534242837815549623",
"100327130374790202853089896157812353247",
"261907981229978607161837600701323034748",
"189971122979228702250909911053272813682",
"98749409264732122467436547077516304620",
"110768111865204674784414260117903389281",
"53693861520495169634986598506609612915",
"282510825521840392361751752929333193271",
"112542222150427551212819801827523399142",
"220738389666187279830391767972360940033"
],
"threshold": 0.9
},
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1",
"id": "CVE-2022-49938-cf9647ce"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@27893dfc1285f80f80f46b3b8c95f5d15d2e66d0",
"target": {
"file": "fs/cifs/smb2pdu.c"
},
"digest": {
"line_hashes": [
"33918404259266090929434612204012420580",
"179766920619453513900637771083960352222",
"255065132884668925564995524996760571905",
"252270891775282616722319502464702755116",
"200146462114456435422342477255347467703",
"241123358240045142917940958276961299675",
"276539759233991772192931402811553160576",
"290665178936789556075577408579508753792",
"77437395479110470025542837072841517163",
"322846489758192429782898345414565001408",
"185840723019934783451910799183674322686",
"16539979691884154966662205841895610062",
"337270512191619370474364009849676188830",
"241123358240045142917940958276961299675",
"276539759233991772192931402811553160576",
"297332144854859576311872660704319472569",
"177553823447914341816532519381482825353",
"107215011125127315114534242837815549623",
"100327130374790202853089896157812353247",
"261907981229978607161837600701323034748",
"189971122979228702250909911053272813682",
"98749409264732122467436547077516304620",
"110768111865204674784414260117903389281",
"53693861520495169634986598506609612915",
"282510825521840392361751752929333193271",
"112542222150427551212819801827523399142",
"220738389666187279830391767972360940033"
],
"threshold": 0.9
},
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1",
"id": "CVE-2022-49938-d57790e4"
}
]