CVE-2022-50114

net: 9p: fix refcount leak in p9_read_work() error handling

MEDIUM
5.5
CVSS Score
Published: June 18, 2025 at 11:02 AM UTC
Updated: July 4, 2026 at 12:34 PM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Severity
MEDIUM5.5
Exploit prediction
EPSS 0.2%

Description

In the Linux kernel, the following vulnerability has been resolved: net: 9p: fix refcount leak in p9_read_work() error handling p9_req_put need to be called when m->rreq->rc.sdata is NULL to avoid temporary refcount leak. [Dominique: commit wording adjustments, p9_req_put argument fixes for rebase]

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

v ≥ 4.19.574.19.57 ≤ v < 4.204.19.57 ≤ v < 5.15.614.20 ≤ v < 5.10.2604.20 ≤ v < 5.15.614.20 ≤ v < 5.18.184.20 ≤ v < 5.19.24.20 ≤ v < 6.05.16 ≤ v < 5.18.185.19 ≤ v < 5.19.23665a4d9dca1bd06bc34afb72e637fe01b2776ee4.19.574.20728356dedeff8ef999cb436c71333ef4ac51a81c
Vendor states this is fixed in 34b9a188557c1d5a50e07cf228d054101aee0af3 (fixed)
Vendor states this is fixed in 4ac7573e1f9333073fa8d303acc941c9b7ab7f61 (fixed)
Vendor states this is fixed in 622f2a467bdfbce73fd43ea74b5f0fd2caaa8c5d (fixed)
Vendor states this is fixed in 8324649b0035cbb30ebc3ca901540cb392e89041 (fixed)
Vendor states this is fixed in 9bc63a124cc20a69a126e45e3d593d5807bb5258 (fixed)
Vendor states this is fixed in 4.20 (unaffected)
Vendor states this is fixed in 5.10.260 (unaffected)
Vendor states this is fixed in 5.15.61 (unaffected)
Vendor states this is fixed in 5.18.18 (unaffected)
Vendor states this is fixed in 5.19.2 (unaffected)
Vendor states this is fixed in 6.0 (unaffected)

CVSS

Attack Vector
LOCAL
Complexity
LOW
Privileges
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
NONE
Availability
HIGH
Vector?

Quick Info

StatusMODIFIED
CWE
NVD-CWE-Other

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Free plan, no card