CVE-2022-49316

Katalog CVE

CVSS 5.5 · Medium EPSS 0,21%

Kerentanan Improper Locking pada linux kernel. Skor CVSS 3.1 5.5 (Medium) menurut NVD.

Deskripsi (NVD)

In the Linux kernel, the following vulnerability has been resolved: NFSv4: Don't hold the layoutget locks across multiple RPC calls When doing layoutget as part of the open() compound, we have to be careful to release the layout locks before we can call any further RPC calls, such as setattr(). The reason is that those calls could trigger a recall, which could deadlock.

Rincian

Terbit di NVD

26 Februari 2025

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

5.5 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-667: Improper Locking

EPSS (30 hari)

0,21% peluang dieksploitasi; lebih tinggi dari 10,5% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://git.kernel.org/stable/c/08d7a26d115cc7892668baa9750f64bd8baca29b patch
• https://git.kernel.org/stable/c/0ee5b9644f06b4d3cdcd9544f43f63312e425a4c patch
• https://git.kernel.org/stable/c/6949493884fe88500de4af182588e071cf1544ee patch
• https://git.kernel.org/stable/c/6b3fc1496e7227cd6a39a80bbfb7588ef7c7a010 patch
• https://git.kernel.org/stable/c/a2b3be930e79cc5d9d829f158e31172b2043f0cd patch
• https://git.kernel.org/stable/c/d4c2a041ed3ba114502d5ed6ace5b1a48d637a8e patch
• https://git.kernel.org/stable/c/ea759ae0a9ae5acee677d722129710ac89cc59c1 patch