imPC@ndo IT

Tracker / CVE-2022-49768

CVE-2022-49768

High 7.5

In the Linux kernel, the following vulnerability has been resolved: 9p: trans_fd/p9_conn_cancel: drop client lock earlier syzbot reported a double-lock here and we no longer need this lock after requests have been moved off to local list: just drop the lock earlier.

Affected products and versions

linux linux_kernel · 4.14.70 → 4.14.300
linux linux_kernel · 4.18.8 → 4.19.267
linux linux_kernel · 4.20 → 5.4.225
linux linux_kernel · 4.9.127 → 4.9.334
linux linux_kernel · 5.11 → 5.15.80
linux linux_kernel · 5.16 → 6.0.10
linux linux_kernel · 5.5 → 5.10.156

Analysis

This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.

References