NetSight
high7.5

CVE-2022-49768

In the Linux kernel, the following vulnerability has been resolved: 9p: trans_fd/p9_conn_cancel: drop client lock earlier syzbot reported a double-lock here an…

Impact

In the Linux kernel, the following vulnerability has been resolved: 9p: trans_fd/p9_conn_cancel: drop client lock earlier syzbot reported a double-lock here and we no longer need this lock after requests have been moved off to local list: just drop the lock earlier.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 4.9.127 before 4.9.334
from 4.14.70 before 4.14.300
from 4.18.8 before 4.19.267
from 4.20 before 5.4.225
from 5.5 before 5.10.156
from 5.11 before 5.15.80

Weakness classification

References