CVE-2022-49418

MEDIUM EPSS 11.1%

Published Feb 26, 20251y ago · Modified Jun 17, 20261w ago

5.5 CVSS 3.1

Medium

Published Feb 26, 2025 1y ago

Last Modified Jun 17, 2026 1w ago

Description

In the Linux kernel, the following vulnerability has been resolved: NFSv4: Fix free of uninitialized nfs4_label on referral lookup. Send along the already-allocated fattr along with nfs4_fs_locations, and drop the memcpy of fattr. We end up growing two more allocations, but this fixes up a crash as: PID: 790 TASK: ffff88811b43c000 CPU: 0 COMMAND: "ls" #0 [ffffc90000857920] panic at ffffffff81b9bfde #1 [ffffc900008579c0] do_trap at ffffffff81023a9b #2 [ffffc90000857a10] do_error_trap at ffffffff81023b78 #3 [ffffc90000857a58] exc_stack_segment at ffffffff81be1f45 #4 [ffffc90000857a80] asm_exc_stack_segment at ffffffff81c009de #5 [ffffc90000857b08] nfs_lookup at ffffffffa0302322 [nfs] #6 [ffffc90000857b70] __lookup_slow at ffffffff813a4a5f #7 [ffffc90000857c60] walk_component at ffffffff813a86c4 #8 [ffffc90000857cb8] path_lookupat at ffffffff813a9553 #9 [ffffc90000857cf0] filename_lookup at ffffffff813ab86b

CVSS Details

Base Score

5.5

Exploitability

1.8

Impact

3.6

Vector string

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Attack Vector Local

Attack Complexity Low

Privileges Required Low

User Interaction None

Scope Unchanged

Confidentiality None

Integrity None

Availability High

Threat Intelligence

EPSS Exploit Probability

11.1% percentile

Exploit & Patch Status

No Known Exploit

Patch Available

Weaknesses 1

CWE-908

Affected Products 1

Vendor	Product	Version	Range
linux	linux_kernel	*	≥5.16 – <5.18.3

References 2

git.kernel.org https://git.kernel.org/stable/c/6015292653d95ba9f72906e2b65e536aa5807d64

Patch
git.kernel.org https://git.kernel.org/stable/c/c3ed222745d9ad7b69299b349a64ba533c64a34f

Patch

Remediation

git.kernel.org https://git.kernel.org/stable/c/6015292653d95ba9f72906e2b65e536aa5807d64

Patch
git.kernel.org https://git.kernel.org/stable/c/c3ed222745d9ad7b69299b349a64ba533c64a34f

Patch