CVE-2022-49362

Source
https://nvd.nist.gov/vuln/detail/CVE-2022-49362
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-49362.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2022-49362
Downstream
Related
Published
2025-02-26T02:11:09Z
Modified
2025-10-15T21:08:06.384938Z
Severity
  • 7.8 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
NFSD: Fix potential use-after-free in nfsd_file_put()
Details

In the Linux kernel, the following vulnerability has been resolved:

NFSD: Fix potential use-after-free in nfsdfileput()

nfsdfileputnoref() can free @nf, so don't dereference @nf immediately upon return from nfsdfileputnoref().

References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
9862064ca81f9b9da8ebe26c86cf2b10c293ba1a
Fixed
ada1757b259f353cade47037ee0a0249b4cddad3
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
a98e5b3d958ac697aafb3d077eb2cca4a731b7ee
Fixed
261eabe19cb28e4a8587a4442d257b543d7c2d57
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
999397926ab3f78c7d1235cc4ca6e3c89d2769bf
Fixed
333dcc94ebf53f79f3dc0e7a7c16700bc7ff7e57
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
999397926ab3f78c7d1235cc4ca6e3c89d2769bf
Fixed
b6c71c66b0ad8f2b59d9bc08c7a5079b110bec01

Affected versions

v5.*

v5.17
v5.17-rc7
v5.17-rc8
v5.18
v5.18-rc1
v5.18-rc2
v5.18-rc3
v5.18-rc4
v5.18-rc5
v5.18-rc6
v5.18-rc7
v5.18.1
v5.18.2
v5.18.3

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
5.18.0
Fixed
5.18.4