Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2022-50072

NFSv4/pnfs: Fix a use-after-free bug in open

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: NFSv4/pnfs: Fix a use-after-free bug in open If someone cancels the open RPC call, then we must not try to free either the open slot or the layoutget operation arguments, since they are likely still in use by the hung RPC call.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 6b3fc1496e7227cd6a39a80bbfb7588ef7c7a010 to < 0fffb46ff3d5ed4668aca96441ec7a25b793bd6faffected
  • a2b3be930e79cc5d9d829f158e31172b2043f0cd to < f7ee3b772d9de87387a725caa04bc041ac7fe5ecaffected
  • 0ee5b9644f06b4d3cdcd9544f43f63312e425a4c to < 76ffd2042438769298f34b76102b40dea89de616affected
  • d4c2a041ed3ba114502d5ed6ace5b1a48d637a8e to < a4cf3dadd1fa43609f7c6570c9116b0e0a9923d1affected
  • 6949493884fe88500de4af182588e071cf1544ee to < b03d1117e9be7c7da60e466eaf9beed85c5916c8affected
  • 6949493884fe88500de4af182588e071cf1544ee to < 2135e5d56278ffdb1c2e6d325dc6b87f669b9dacaffected
  • 08d7a26d115cc7892668baa9750f64bd8baca29baffected
  • ea759ae0a9ae5acee677d722129710ac89cc59c1affected
  • 4.19.247 to < 4.19.256affected
  • 5.4.198 to < 5.4.211affected
  • 5.10.122 to < 5.10.138affected
  • 5.15.47 to < 5.15.63affected
  • 5.17.15 to < 5.18affected
  • 5.18.4 to < 5.19affected

Linux Linux

Default version status: affected

  • 5.19affected
  • 0 to < 5.19unaffected
  • 4.19.256 to ≤ 4.19.*unaffected
  • 5.4.211 to ≤ 5.4.*unaffected
  • 5.10.138 to ≤ 5.10.*unaffected
  • 5.15.63 to ≤ 5.15.*unaffected
  • 5.19.4 to ≤ 5.19.*unaffected
  • 6.0 to ≤ *unaffected

References