CVE-2022-49366

ksmbd: fix reference count leak in smb_check_perm_dacl()

Description

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix reference count leak in smb_check_perm_dacl() The issue happens in a specific path in smb_check_perm_dacl(). When "id" and "uid" have the same value, the function simply jumps out of the loop without decrementing the reference count of the object "posix_acls", which is increased by get_acl() earlier. This may result in memory leaks. Fix it by decreasing the reference count of "posix_acls" before jumping to label "check_access_bits".

5.5

CVSS

Severity: Medium

CVSS 3.1 •

EPSS 0.02%

Affected: Linux Linux

References

Link	Tags
https://git.kernel.org/stable/c/cf824b95c12a1abacadbc2d069931963221a3414	patch
https://git.kernel.org/stable/c/248d71b440aef829f5cc5f6545ca113ef5062900	patch
https://git.kernel.org/stable/c/9758a6653c27867d810de02b4e5697163dda9883	patch
https://git.kernel.org/stable/c/d21a580dafc69aa04f46e6099616146a536b0724	patch

Frequently Asked Questions

What is the severity of CVE-2022-49366?: CVE-2022-49366 has been scored as a medium severity vulnerability.
How to fix CVE-2022-49366?: To fix CVE-2022-49366, make sure you are using an up-to-date version of the affected component(s) by checking the vendor release notes. As for now, there are no other specific guidelines available.
Is CVE-2022-49366 being actively exploited in the wild?: As for now, there are no information to confirm that CVE-2022-49366 is being actively exploited. According to its EPSS score, there is a ~0% probability that this vulnerability will be exploited by malicious actors in the next 30 days.
What software or system is affected by CVE-2022-49366?: CVE-2022-49366 affects Linux Linux, Linux Linux.

This platform uses data from the NIST NVD, MITRE CVE, MITRE CWE, First.org and CISA KEV but is not endorsed or certified by these entities. CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site.