In the Linux kernel, the following vulnerability has been resolved:

net/9p: Fix a potential socket leak in p9_socket_open

Both p9_fd_create_tcp() and p9_fd_create_unix() will call
p9_socket_open(). If the creation of p9_trans_fd fails,
p9_fd_create_tcp() and p9_fd_create_unix() will return an
error directly instead of releasing the cscoket, which will
result in a socket leak.

This patch adds sock_release() to fix the leak issue.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00014.

Exploitation none

Automatable no

Technical Impact partial

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Linux Linux unaffected
Version Status Constraints
6b18662e239a032f908b7f6e164bdf7e2e0a32c9 affected < 0396227f4daf4792a6a8aaa3b7771dc25c4cd443
6b18662e239a032f908b7f6e164bdf7e2e0a32c9 affected < ded893965b895b2dccd3d1436d8d3daffa23ea64
6b18662e239a032f908b7f6e164bdf7e2e0a32c9 affected < 8b14bd0b500aec1458b51cb621c8e5fab3304260
6b18662e239a032f908b7f6e164bdf7e2e0a32c9 affected < 2d24d91b9f44620824fc37b766f7cae00ca32748
6b18662e239a032f908b7f6e164bdf7e2e0a32c9 affected < e01c1542379fb395e7da53706df598f38905dfbf
6b18662e239a032f908b7f6e164bdf7e2e0a32c9 affected < 8782b32ef867de7981bbe9e86ecb90e92e8780bd
6b18662e239a032f908b7f6e164bdf7e2e0a32c9 affected < aa08323fe18cb7cf95317ffa2d54ca1de8e74ebd
6b18662e239a032f908b7f6e164bdf7e2e0a32c9 affected < dcc14cfd7debe11b825cb077e75d91d2575b4cb8
Linux Linux affected
Version Status Constraints
2.6.33 affected —
0 unaffected < 2.6.33
4.9.335 unaffected ≤ 4.9.*
4.14.301 unaffected ≤ 4.14.*
4.19.268 unaffected ≤ 4.19.*
5.4.226 unaffected ≤ 5.4.*
5.10.158 unaffected ≤ 5.10.*
5.15.82 unaffected ≤ 5.15.*
6.0.12 unaffected ≤ 6.0.*
6.1 unaffected ≤ *

Configuration 1 [-]

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.1:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.1:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.1:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.1:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.1:rc5:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.1:rc6:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.1:rc7:*:*:*:*:*:*

No data.

No data.

Project Subscriptions

Vendors Products
Linux Subscribe
Linux Kernel Subscribe
Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://git.kernel.org/stable/c/0396227f4daf4792a6a8aaa3b7771dc25c4cd443 cve-icon cve-icon
https://git.kernel.org/stable/c/2d24d91b9f44620824fc37b766f7cae00ca32748 cve-icon cve-icon
https://git.kernel.org/stable/c/8782b32ef867de7981bbe9e86ecb90e92e8780bd cve-icon cve-icon
https://git.kernel.org/stable/c/8b14bd0b500aec1458b51cb621c8e5fab3304260 cve-icon cve-icon
https://git.kernel.org/stable/c/aa08323fe18cb7cf95317ffa2d54ca1de8e74ebd cve-icon cve-icon
https://git.kernel.org/stable/c/dcc14cfd7debe11b825cb077e75d91d2575b4cb8 cve-icon cve-icon
https://git.kernel.org/stable/c/ded893965b895b2dccd3d1436d8d3daffa23ea64 cve-icon cve-icon
https://git.kernel.org/stable/c/e01c1542379fb395e7da53706df598f38905dfbf cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2024102154-CVE-2022-49020-2d32@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2022-49020 cve-icon
https://www.cve.org/CVERecord?id=CVE-2022-49020 cve-icon
History

Fri, 25 Oct 2024 14:45:00 +0000

Type Values Removed Values Added
Weaknesses CWE-772

Thu, 24 Oct 2024 19:00:00 +0000

Type Values Removed Values Added
First Time appeared Linux
Linux linux Kernel
Weaknesses CWE-401
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.1:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.1:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.1:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.1:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.1:rc5:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.1:rc6:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.1:rc7:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel

Tue, 22 Oct 2024 14:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Tue, 22 Oct 2024 13:15:00 +0000

Type Values Removed Values Added
References
Metrics threat_severity

None

 cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

threat_severity

Moderate

Mon, 21 Oct 2024 20:15:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: net/9p: Fix a potential socket leak in p9_socket_open Both p9_fd_create_tcp() and p9_fd_create_unix() will call p9_socket_open(). If the creation of p9_trans_fd fails, p9_fd_create_tcp() and p9_fd_create_unix() will return an error directly instead of releasing the cscoket, which will result in a socket leak. This patch adds sock_release() to fix the leak issue.
Title net/9p: Fix a potential socket leak in p9_socket_open
References

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2025-05-04T08:28:13.138Z

Reserved: 2024-08-22T01:27:53.649Z

Link: CVE-2022-49020

cve-icon Vulnrichment

Updated: 2024-10-22T13:12:46.188Z

cve-icon NVD

Status : Analyzed

Published: 2024-10-21T20:15:13.100

Modified: 2024-10-24T18:43:20.887

Link: CVE-2022-49020

cve-icon Redhat

Severity : Moderate

Publid Date: 2024-10-21T00:00:00Z

Links: CVE-2022-49020 - Bugzilla

cve-icon OpenCVE Enrichment

No data.

Weaknesses