Vulnerability details
CVE-2022-49768
Linux Linux
9p: trans_fd/p9_conn_cancel: drop client lock earlier
CVSS 3.1
7.5High
Official description
In the Linux kernel, the following vulnerability has been resolved: 9p: trans_fd/p9_conn_cancel: drop client lock earlier syzbot reported a double-lock here and we no longer need this lock after requests have been moved off to local list: just drop the lock earlier.
CVSS scores
| Score | Version | Source | Vector |
|---|---|---|---|
| 7.5High | 3.1 | CVEProject cvelistV5 (CNA) (Linux) | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
Affected products
| Vendor | Product | Versions | Source |
|---|---|---|---|
| Linux | Linux | 4.19 | CVEProject cvelistV5 (CNA) |
| Linux | Linux | 91ca7c5644c370dc5132b1db1aea81416a4b2181 | CVEProject cvelistV5 (CNA) |
| Linux | Linux | 4.14.70 ≤ v < 4.14.300 | CVEProject cvelistV5 (CNA) |
| Linux | Linux | 4.18.8 ≤ v < 4.19 | CVEProject cvelistV5 (CNA) |
| Linux | Linux | 4.9.127 ≤ v < 4.9.334 | CVEProject cvelistV5 (CNA) |
| Linux | Linux | 4cd195263e420311d31451cc053fde8037f326f1 ≤ v < e3031280fe4eaf61a09e60823331f81f321be8e1 | CVEProject cvelistV5 (CNA) |
| Linux | Linux | 9f476d7c540cb57556d3cc7e78704e6cd5100f5f ≤ v < 612c977f5d481f551d03d83d0aef588845c1300c | CVEProject cvelistV5 (CNA) |
| Linux | Linux | 9f476d7c540cb57556d3cc7e78704e6cd5100f5f ≤ v < fec1406f5e7ab20b71f6d231792b0040e3300aaf | CVEProject cvelistV5 (CNA) |
| Linux | Linux | 9f476d7c540cb57556d3cc7e78704e6cd5100f5f ≤ v < 96760723aae1b45f733f702abb4333137143909f | CVEProject cvelistV5 (CNA) |
| Linux | Linux | 9f476d7c540cb57556d3cc7e78704e6cd5100f5f ≤ v < f14858bc77c567e089965962877ee726ffad0556 | CVEProject cvelistV5 (CNA) |
| Linux | Linux | 9f476d7c540cb57556d3cc7e78704e6cd5100f5f ≤ v < a4f1a01b2e81378fce9ca528d4d8a049e4b58fcd | CVEProject cvelistV5 (CNA) |
| Linux | Linux | 9f476d7c540cb57556d3cc7e78704e6cd5100f5f ≤ v < 52f1c45dde9136f964d63a77d19826c8a74e2c7f | CVEProject cvelistV5 (CNA) |
| Linux | Linux | eb1ca07f4343b4e58b97e792a85d5ba1ba103f5d ≤ v < 82825dbf393f7c7979d462f9609a15bde8092b3f | CVEProject cvelistV5 (CNA) |
References and advisories
8- https://git.kernel.org/stable/c/82825dbf393f7c7979d462f9609a15bde8092b3f
- https://git.kernel.org/stable/c/e3031280fe4eaf61a09e60823331f81f321be8e1
- https://git.kernel.org/stable/c/fec1406f5e7ab20b71f6d231792b0040e3300aaf
- https://git.kernel.org/stable/c/96760723aae1b45f733f702abb4333137143909f
- https://git.kernel.org/stable/c/f14858bc77c567e089965962877ee726ffad0556
- https://git.kernel.org/stable/c/a4f1a01b2e81378fce9ca528d4d8a049e4b58fcd
- https://git.kernel.org/stable/c/612c977f5d481f551d03d83d0aef588845c1300c
- https://git.kernel.org/stable/c/52f1c45dde9136f964d63a77d19826c8a74e2c7f
Kolun on Telegram @kolunsec
Exploited CVEs, key news and a daily digest
Alerts for this product's next CVEsFollow the product to get new vulnerabilities on Telegram.
Details
- Published
- 2025-05-01
- Last updated
- 2026-08-05
- State
- Published
- Assigner (CNA)
- Linux
Exploit prediction (EPSS)
0.39%
Probability of exploitation in 30 days
34.2%
Percentile (among all CVEs)
Weaknesses (CWE)
- —