In the Linux kernel, the following vulnerability has been resolved:
NFSv4/pnfs: Fix a use-after-free bug in open
If someone cancels the open RPC call, then we must not try to free either the open slot or the layoutget operation arguments, since they are likely still in use by the hung RPC call.
[
{
"deprecated": false,
"id": "CVE-2022-50072-2b1b9506",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b03d1117e9be7c7da60e466eaf9beed85c5916c8",
"signature_version": "v1",
"target": {
"file": "fs/nfs/nfs4proc.c"
},
"signature_type": "Line",
"digest": {
"line_hashes": [
"104919525987599543665442706396868515432",
"163778307214894242369224075964081965107",
"291762707907517685086386695580515725098",
"32891680304618812778548698116533779626",
"267062212969093464110370227039045839723",
"193401225712791901445800252419885915904",
"232985662007113371261639589292237034559",
"53761206396849961758828178603080901497",
"102602526855891920726983106228939490996"
],
"threshold": 0.9
}
},
{
"deprecated": false,
"id": "CVE-2022-50072-6c94a0f2",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f7ee3b772d9de87387a725caa04bc041ac7fe5ec",
"signature_version": "v1",
"target": {
"file": "fs/nfs/nfs4proc.c"
},
"signature_type": "Line",
"digest": {
"line_hashes": [
"104919525987599543665442706396868515432",
"163778307214894242369224075964081965107",
"291762707907517685086386695580515725098",
"32891680304618812778548698116533779626",
"267062212969093464110370227039045839723",
"193401225712791901445800252419885915904",
"232985662007113371261639589292237034559",
"53761206396849961758828178603080901497",
"102602526855891920726983106228939490996"
],
"threshold": 0.9
}
},
{
"deprecated": false,
"id": "CVE-2022-50072-71270714",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@76ffd2042438769298f34b76102b40dea89de616",
"signature_version": "v1",
"target": {
"file": "fs/nfs/nfs4proc.c"
},
"signature_type": "Line",
"digest": {
"line_hashes": [
"104919525987599543665442706396868515432",
"163778307214894242369224075964081965107",
"291762707907517685086386695580515725098",
"32891680304618812778548698116533779626",
"267062212969093464110370227039045839723",
"193401225712791901445800252419885915904",
"232985662007113371261639589292237034559",
"53761206396849961758828178603080901497",
"102602526855891920726983106228939490996"
],
"threshold": 0.9
}
},
{
"deprecated": false,
"id": "CVE-2022-50072-7b4b7ab3",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0fffb46ff3d5ed4668aca96441ec7a25b793bd6f",
"signature_version": "v1",
"target": {
"function": "_nfs4_open_and_get_state",
"file": "fs/nfs/nfs4proc.c"
},
"signature_type": "Function",
"digest": {
"function_hash": "123755163921454643660176889020647792309",
"length": 1420.0
}
},
{
"deprecated": false,
"id": "CVE-2022-50072-7fc7fa5a",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b03d1117e9be7c7da60e466eaf9beed85c5916c8",
"signature_version": "v1",
"target": {
"function": "_nfs4_open_and_get_state",
"file": "fs/nfs/nfs4proc.c"
},
"signature_type": "Function",
"digest": {
"function_hash": "204687597431379907358581364989082629324",
"length": 1900.0
}
},
{
"deprecated": false,
"id": "CVE-2022-50072-8fa8da2a",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a4cf3dadd1fa43609f7c6570c9116b0e0a9923d1",
"signature_version": "v1",
"target": {
"file": "fs/nfs/nfs4proc.c"
},
"signature_type": "Line",
"digest": {
"line_hashes": [
"104919525987599543665442706396868515432",
"163778307214894242369224075964081965107",
"291762707907517685086386695580515725098",
"32891680304618812778548698116533779626",
"267062212969093464110370227039045839723",
"193401225712791901445800252419885915904",
"232985662007113371261639589292237034559",
"53761206396849961758828178603080901497",
"102602526855891920726983106228939490996"
],
"threshold": 0.9
}
},
{
"deprecated": false,
"id": "CVE-2022-50072-b1055911",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2135e5d56278ffdb1c2e6d325dc6b87f669b9dac",
"signature_version": "v1",
"target": {
"file": "fs/nfs/nfs4proc.c"
},
"signature_type": "Line",
"digest": {
"line_hashes": [
"104919525987599543665442706396868515432",
"163778307214894242369224075964081965107",
"291762707907517685086386695580515725098",
"32891680304618812778548698116533779626",
"267062212969093464110370227039045839723",
"193401225712791901445800252419885915904",
"232985662007113371261639589292237034559",
"53761206396849961758828178603080901497",
"102602526855891920726983106228939490996"
],
"threshold": 0.9
}
},
{
"deprecated": false,
"id": "CVE-2022-50072-e3ac832d",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0fffb46ff3d5ed4668aca96441ec7a25b793bd6f",
"signature_version": "v1",
"target": {
"file": "fs/nfs/nfs4proc.c"
},
"signature_type": "Line",
"digest": {
"line_hashes": [
"104919525987599543665442706396868515432",
"163778307214894242369224075964081965107",
"291762707907517685086386695580515725098",
"32891680304618812778548698116533779626",
"267062212969093464110370227039045839723",
"193401225712791901445800252419885915904",
"232985662007113371261639589292237034559",
"53761206396849961758828178603080901497",
"102602526855891920726983106228939490996"
],
"threshold": 0.9
}
},
{
"deprecated": false,
"id": "CVE-2022-50072-ea2a3e68",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f7ee3b772d9de87387a725caa04bc041ac7fe5ec",
"signature_version": "v1",
"target": {
"function": "_nfs4_open_and_get_state",
"file": "fs/nfs/nfs4proc.c"
},
"signature_type": "Function",
"digest": {
"function_hash": "59956059044741049704138989944102515322",
"length": 1752.0
}
},
{
"deprecated": false,
"id": "CVE-2022-50072-ec309fb9",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@76ffd2042438769298f34b76102b40dea89de616",
"signature_version": "v1",
"target": {
"function": "_nfs4_open_and_get_state",
"file": "fs/nfs/nfs4proc.c"
},
"signature_type": "Function",
"digest": {
"function_hash": "59956059044741049704138989944102515322",
"length": 1752.0
}
},
{
"deprecated": false,
"id": "CVE-2022-50072-f40380ee",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a4cf3dadd1fa43609f7c6570c9116b0e0a9923d1",
"signature_version": "v1",
"target": {
"function": "_nfs4_open_and_get_state",
"file": "fs/nfs/nfs4proc.c"
},
"signature_type": "Function",
"digest": {
"function_hash": "59956059044741049704138989944102515322",
"length": 1752.0
}
},
{
"deprecated": false,
"id": "CVE-2022-50072-fba8c868",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2135e5d56278ffdb1c2e6d325dc6b87f669b9dac",
"signature_version": "v1",
"target": {
"function": "_nfs4_open_and_get_state",
"file": "fs/nfs/nfs4proc.c"
},
"signature_type": "Function",
"digest": {
"function_hash": "204687597431379907358581364989082629324",
"length": 1900.0
}
}
]