github - ghsa-w3cc-2684-28pf

ghsa-w3cc-2684-28pf

Vulnerability from github

Published

2025-06-18 12:30

Modified

2025-06-18 12:30

Details

In the Linux kernel, the following vulnerability has been resolved:

net: 9p: fix refcount leak in p9_read_work() error handling

p9_req_put need to be called when m->rreq->rc.sdata is NULL to avoid temporary refcount leak.

[Dominique: commit wording adjustments, p9_req_put argument fixes for rebase]

Show details on source website

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2022-50114"
  ],
  "database_specific": {
    "cwe_ids": [],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2025-06-18T11:15:41Z",
    "severity": null
  },
  "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: 9p: fix refcount leak in p9_read_work() error handling\n\np9_req_put need to be called when m-\u003erreq-\u003erc.sdata is NULL to avoid\ntemporary refcount leak.\n\n[Dominique: commit wording adjustments, p9_req_put argument fixes for rebase]",
  "id": "GHSA-w3cc-2684-28pf",
  "modified": "2025-06-18T12:30:49Z",
  "published": "2025-06-18T12:30:48Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-50114"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/34b9a188557c1d5a50e07cf228d054101aee0af3"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/4ac7573e1f9333073fa8d303acc941c9b7ab7f61"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/622f2a467bdfbce73fd43ea74b5f0fd2caaa8c5d"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/8324649b0035cbb30ebc3ca901540cb392e89041"
    }
  ],
  "schema_version": "1.4.0",
  "severity": []
}

CVE-2022-50114 (GCVE-0-2022-50114)

Vulnerability from cvelistv5

Published

2025-06-18 11:02

Modified

2025-06-18 11:02

Severity ?

Summary

In the Linux kernel, the following vulnerability has been resolved: net: 9p: fix refcount leak in p9_read_work() error handling p9_req_put need to be called when m->rreq->rc.sdata is NULL to avoid temporary refcount leak. [Dominique: commit wording adjustments, p9_req_put argument fixes for rebase]

References

►

URL

Tags

	https://git.kernel.org/stable/c/8324649b0035cbb30ebc3ca901540cb392e89041
	https://git.kernel.org/stable/c/622f2a467bdfbce73fd43ea74b5f0fd2caaa8c5d
	https://git.kernel.org/stable/c/34b9a188557c1d5a50e07cf228d054101aee0af3
	https://git.kernel.org/stable/c/4ac7573e1f9333073fa8d303acc941c9b7ab7f61

Impacted products

Vendor

Product

Version

►

Version: 728356dedeff8ef999cb436c71333ef4ac51a81c
Version: 728356dedeff8ef999cb436c71333ef4ac51a81c
Version: 728356dedeff8ef999cb436c71333ef4ac51a81c
Version: 728356dedeff8ef999cb436c71333ef4ac51a81c
Version: 3665a4d9dca1bd06bc34afb72e637fe01b2776ee

Version: 4.20

Show details on NVD website

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "net/9p/trans_fd.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "8324649b0035cbb30ebc3ca901540cb392e89041",
              "status": "affected",
              "version": "728356dedeff8ef999cb436c71333ef4ac51a81c",
              "versionType": "git"
            },
            {
              "lessThan": "622f2a467bdfbce73fd43ea74b5f0fd2caaa8c5d",
              "status": "affected",
              "version": "728356dedeff8ef999cb436c71333ef4ac51a81c",
              "versionType": "git"
            },
            {
              "lessThan": "34b9a188557c1d5a50e07cf228d054101aee0af3",
              "status": "affected",
              "version": "728356dedeff8ef999cb436c71333ef4ac51a81c",
              "versionType": "git"
            },
            {
              "lessThan": "4ac7573e1f9333073fa8d303acc941c9b7ab7f61",
              "status": "affected",
              "version": "728356dedeff8ef999cb436c71333ef4ac51a81c",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "3665a4d9dca1bd06bc34afb72e637fe01b2776ee",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "net/9p/trans_fd.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "4.20"
            },
            {
              "lessThan": "4.20",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.61",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.18.*",
              "status": "unaffected",
              "version": "5.18.18",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.19.*",
              "status": "unaffected",
              "version": "5.19.2",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.0",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.61",
                  "versionStartIncluding": "4.20",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.18.18",
                  "versionStartIncluding": "4.20",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.19.2",
                  "versionStartIncluding": "4.20",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.0",
                  "versionStartIncluding": "4.20",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "4.19.57",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: 9p: fix refcount leak in p9_read_work() error handling\n\np9_req_put need to be called when m-\u003erreq-\u003erc.sdata is NULL to avoid\ntemporary refcount leak.\n\n[Dominique: commit wording adjustments, p9_req_put argument fixes for rebase]"
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-06-18T11:02:46.152Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/8324649b0035cbb30ebc3ca901540cb392e89041"
        },
        {
          "url": "https://git.kernel.org/stable/c/622f2a467bdfbce73fd43ea74b5f0fd2caaa8c5d"
        },
        {
          "url": "https://git.kernel.org/stable/c/34b9a188557c1d5a50e07cf228d054101aee0af3"
        },
        {
          "url": "https://git.kernel.org/stable/c/4ac7573e1f9333073fa8d303acc941c9b7ab7f61"
        }
      ],
      "title": "net: 9p: fix refcount leak in p9_read_work() error handling",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2022-50114",
    "datePublished": "2025-06-18T11:02:46.152Z",
    "dateReserved": "2025-06-18T10:57:27.414Z",
    "dateUpdated": "2025-06-18T11:02:46.152Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Log in or create an account to share your comment.

Tags

Taxonomy of the tags.

All sightings related to this event Export sightings related to this event

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.