CVE-2022-49822

cifs: Fix connections leak when tlink setup failed

Description

In the Linux kernel, the following vulnerability has been resolved: cifs: Fix connections leak when tlink setup failed If the tlink setup failed, lost to put the connections, then the module refcnt leak since the cifsd kthread not exit. Also leak the fscache info, and for next mount with fsc, it will print the follow errors: CIFS: Cache volume key already in use (cifs,127.0.0.1:445,TEST) Let's check the result of tlink setup, and do some cleanup.

N/A

CVSS

Severity:

EPSS 0.02%

Affected: Linux Linux

References

Link	Tags
https://git.kernel.org/stable/c/a9059e338fc000c0b87d8cf29e93c74fd703212e
https://git.kernel.org/stable/c/0a087842d10b5daa123ee5291e386cdd78413705
https://git.kernel.org/stable/c/1dcdf5f5b2137185cbdd5385f29949ab3da4f00c

Frequently Asked Questions

What is the severity of CVE-2022-49822?: CVE-2022-49822 has not yet been assigned a CVSS score.
How to fix CVE-2022-49822?: To fix CVE-2022-49822, make sure you are using an up-to-date version of the affected component(s) by checking the vendor release notes. As for now, there are no other specific guidelines available.
Is CVE-2022-49822 being actively exploited in the wild?: As for now, there are no information to confirm that CVE-2022-49822 is being actively exploited. According to its EPSS score, there is a ~0% probability that this vulnerability will be exploited by malicious actors in the next 30 days.
What software or system is affected by CVE-2022-49822?: CVE-2022-49822 affects Linux Linux, Linux Linux.

This platform uses data from the NIST NVD, MITRE CVE, MITRE CWE, First.org and CISA KEV but is not endorsed or certified by these entities. CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site.