Critical Refcount Leak in Linux Kernel's 9p Protocol - Linux Package Vulnerability
Summary
CVE-2022-49704: In the Linux kernel, the following vulnerability has been resolved: 9p: fix fid refcount leak in v9fs_vfs_get_link we check for protocol version later than required, after a fid has been obtained. Affects linux versions < 5.18.14-1. Fixed in 5.18.14-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
The Linux kernel is a core component of many operating systems, providing essential services for hardware management, process scheduling, and system resource allocation. The kernel's 9p protocol facilitates communication between the kernel and user-space applications, allowing for file system operations over a network. This vulnerability specifically affects the Linux packages in Debian 12 and 13, which utilize the 9p protocol.
Vulnerability Detail
The vulnerability identified as CVE-2022-49704 is a refcount leak in the 9p protocol implementation within the Linux kernel. This issue arises when the protocol version check is performed after a file identifier (fid) has already been obtained. As a result, the reference count for the fid is not properly managed, potentially leading to memory leaks and instability in the system. If exploited, this vulnerability could allow an attacker to manipulate the kernel's memory management, leading to denial of service or other malicious activities.
How To Fix
Minimum fixed version
5.18.14-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds provided for this vulnerability. It is recommended to apply the patch as soon as it is available.
Conclusion
CVE-2022-49704 represents a significant vulnerability in the Linux kernel's 9p protocol, with potential implications for system stability and security. Users are urged to update their Linux packages to the patched version 5.18.14-1 to mitigate the risks associated with this vulnerability.
See every vulnerability recorded for linux →
FAQ
CVE-2022-49704 is a vulnerability in the Linux kernel's 9p protocol that involves a refcount leak, potentially leading to system instability.
This vulnerability can lead to memory leaks and may allow attackers to exploit the kernel's memory management, resulting in denial of service or other malicious actions.
The vulnerability affects the Linux packages in Debian 12 and 13, specifically versions prior to 5.18.14-1.
You can use Vulert, which monitors and alerts for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected without needing to sign up.
While there are no specific workarounds available, it is crucial to plan for an update to mitigate the risks associated with this vulnerability.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
