CVE-2022-49768 (GCVE-0-2022-49768)

Vulnerability from cvelistv5 – Published: 2025-05-01 14:09 – Updated: 2026-08-05 08:56
VLAI
Title
9p: trans_fd/p9_conn_cancel: drop client lock earlier
Summary
In the Linux kernel, the following vulnerability has been resolved: 9p: trans_fd/p9_conn_cancel: drop client lock earlier syzbot reported a double-lock here and we no longer need this lock after requests have been moved off to local list: just drop the lock earlier.
Severity
7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Assigner
References
Impacted products
Vendor Product Version CPE status
Linux Linux Affected: eb1ca07f4343b4e58b97e792a85d5ba1ba103f5d , < 82825dbf393f7c7979d462f9609a15bde8092b3f (git)
Affected: 4cd195263e420311d31451cc053fde8037f326f1 , < e3031280fe4eaf61a09e60823331f81f321be8e1 (git)
Affected: 9f476d7c540cb57556d3cc7e78704e6cd5100f5f , < fec1406f5e7ab20b71f6d231792b0040e3300aaf (git)
Affected: 9f476d7c540cb57556d3cc7e78704e6cd5100f5f , < 96760723aae1b45f733f702abb4333137143909f (git)
Affected: 9f476d7c540cb57556d3cc7e78704e6cd5100f5f , < f14858bc77c567e089965962877ee726ffad0556 (git)
Affected: 9f476d7c540cb57556d3cc7e78704e6cd5100f5f , < a4f1a01b2e81378fce9ca528d4d8a049e4b58fcd (git)
Affected: 9f476d7c540cb57556d3cc7e78704e6cd5100f5f , < 612c977f5d481f551d03d83d0aef588845c1300c (git)
Affected: 9f476d7c540cb57556d3cc7e78704e6cd5100f5f , < 52f1c45dde9136f964d63a77d19826c8a74e2c7f (git)
Affected: 91ca7c5644c370dc5132b1db1aea81416a4b2181 (git)
Affected: 4.9.127 , < 4.9.334 (semver)
Affected: 4.14.70 , < 4.14.300 (semver)
Affected: 4.18.8 , < 4.19 (semver)
guessed Create a notification for this product.
Linux Linux Affected: 4.19
Unaffected: 0 , < 4.19 (semver)
Unaffected: 4.9.334 , ≤ 4.9.* (semver)
Unaffected: 4.14.300 , ≤ 4.14.* (semver)
Unaffected: 4.19.267 , ≤ 4.19.* (semver)
Unaffected: 5.4.225 , ≤ 5.4.* (semver)
Unaffected: 5.10.156 , ≤ 5.10.* (semver)
Unaffected: 5.15.80 , ≤ 5.15.* (semver)
Unaffected: 6.0.10 , ≤ 6.0.* (semver)
Unaffected: 6.1 , ≤ * (original_commit_for_fix)
guessed Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "net/9p/trans_fd.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "82825dbf393f7c7979d462f9609a15bde8092b3f",
              "status": "affected",
              "version": "eb1ca07f4343b4e58b97e792a85d5ba1ba103f5d",
              "versionType": "git"
            },
            {
              "lessThan": "e3031280fe4eaf61a09e60823331f81f321be8e1",
              "status": "affected",
              "version": "4cd195263e420311d31451cc053fde8037f326f1",
              "versionType": "git"
            },
            {
              "lessThan": "fec1406f5e7ab20b71f6d231792b0040e3300aaf",
              "status": "affected",
              "version": "9f476d7c540cb57556d3cc7e78704e6cd5100f5f",
              "versionType": "git"
            },
            {
              "lessThan": "96760723aae1b45f733f702abb4333137143909f",
              "status": "affected",
              "version": "9f476d7c540cb57556d3cc7e78704e6cd5100f5f",
              "versionType": "git"
            },
            {
              "lessThan": "f14858bc77c567e089965962877ee726ffad0556",
              "status": "affected",
              "version": "9f476d7c540cb57556d3cc7e78704e6cd5100f5f",
              "versionType": "git"
            },
            {
              "lessThan": "a4f1a01b2e81378fce9ca528d4d8a049e4b58fcd",
              "status": "affected",
              "version": "9f476d7c540cb57556d3cc7e78704e6cd5100f5f",
              "versionType": "git"
            },
            {
              "lessThan": "612c977f5d481f551d03d83d0aef588845c1300c",
              "status": "affected",
              "version": "9f476d7c540cb57556d3cc7e78704e6cd5100f5f",
              "versionType": "git"
            },
            {
              "lessThan": "52f1c45dde9136f964d63a77d19826c8a74e2c7f",
              "status": "affected",
              "version": "9f476d7c540cb57556d3cc7e78704e6cd5100f5f",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "91ca7c5644c370dc5132b1db1aea81416a4b2181",
              "versionType": "git"
            },
            {
              "lessThan": "4.9.334",
              "status": "affected",
              "version": "4.9.127",
              "versionType": "semver"
            },
            {
              "lessThan": "4.14.300",
              "status": "affected",
              "version": "4.14.70",
              "versionType": "semver"
            },
            {
              "lessThan": "4.19",
              "status": "affected",
              "version": "4.18.8",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "net/9p/trans_fd.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "4.19"
            },
            {
              "lessThan": "4.19",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.9.*",
              "status": "unaffected",
              "version": "4.9.334",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.14.*",
              "status": "unaffected",
              "version": "4.14.300",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.19.*",
              "status": "unaffected",
              "version": "4.19.267",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.4.*",
              "status": "unaffected",
              "version": "5.4.225",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.156",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.80",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.0.*",
              "status": "unaffected",
              "version": "6.0.10",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.1",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.9.334",
                  "versionStartIncluding": "4.9.127",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.14.300",
                  "versionStartIncluding": "4.14.70",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.19.267",
                  "versionStartIncluding": "4.19",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.4.225",
                  "versionStartIncluding": "4.19",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.156",
                  "versionStartIncluding": "4.19",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.80",
                  "versionStartIncluding": "4.19",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.0.10",
                  "versionStartIncluding": "4.19",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1",
                  "versionStartIncluding": "4.19",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "4.18.8",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\n9p: trans_fd/p9_conn_cancel: drop client lock earlier\n\nsyzbot reported a double-lock here and we no longer need this\nlock after requests have been moved off to local list:\njust drop the lock earlier."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "scenarios": [
            {
              "lang": "en",
              "value": "AV:N - The recursive deadlock is reached from p9_read_work()/p9_poll_mux() on the TCP (and unix) fd transport when processing peer-driven I/O errors or malformed replies; a remote malicious 9p server can close the connection or send bad headers/tags over the established TCP session to enter p9_conn_cancel().\nAC:L - After a request is fully written the writer has already put its ref, leaving the waiting client with refcount 1; the remote peer can then deterministically force cancel (ECONNRESET, bad header, unexpected tag), so p9_client_cb()\u0027s final p9_req_put() re-takes client-\u003elock with no race outside attacker control.\nPR:N - The attacker is the remote 9p server and needs no credentials or capabilities on the client; reply/error handling on the transport runs without authentication or privilege checks, matching other trans_fd peer-driven 9p client bugs.\nUI:N - Exploitation rides an already-configured or automounted 9p TCP session and server-driven errors/replies; the mount is a deployment precondition, not a required victim action beyond ordinary use of that mount.\nS:U - Impact is a host-kernel deadlock inside the 9p client on the same OS security authority; there is no VM escape, IOMMU bypass, or other cross-boundary effect.\nC:N - This is a pure recursive spinlock deadlock (p9_conn_cancel \u2192 p9_client_cb \u2192 p9_req_put \u2192 p9_tag_remove on the same client-\u003elock); it does not free early, leak, or otherwise disclose kernel memory.\nI:N - There is no memory corruption, UAF, or write primitive\u2014only nested acquisition of the same non-recursive spinlock\u2014so control-flow hijack or arbitrary modification is not available.\nA:H - Re-taking client-\u003elock while already holding it deadlocks the p9_read_work kworker with preemption disabled, hangs all further 9p operations on that client, and can soft-lockup the CPU; syzbot reported the recursive lock in p9_req_put from this path."
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-05T08:56:16.608Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/82825dbf393f7c7979d462f9609a15bde8092b3f"
        },
        {
          "url": "https://git.kernel.org/stable/c/e3031280fe4eaf61a09e60823331f81f321be8e1"
        },
        {
          "url": "https://git.kernel.org/stable/c/fec1406f5e7ab20b71f6d231792b0040e3300aaf"
        },
        {
          "url": "https://git.kernel.org/stable/c/96760723aae1b45f733f702abb4333137143909f"
        },
        {
          "url": "https://git.kernel.org/stable/c/f14858bc77c567e089965962877ee726ffad0556"
        },
        {
          "url": "https://git.kernel.org/stable/c/a4f1a01b2e81378fce9ca528d4d8a049e4b58fcd"
        },
        {
          "url": "https://git.kernel.org/stable/c/612c977f5d481f551d03d83d0aef588845c1300c"
        },
        {
          "url": "https://git.kernel.org/stable/c/52f1c45dde9136f964d63a77d19826c8a74e2c7f"
        }
      ],
      "title": "9p: trans_fd/p9_conn_cancel: drop client lock earlier",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2022-49768",
    "datePublished": "2025-05-01T14:09:06.864Z",
    "dateReserved": "2025-04-16T07:17:33.804Z",
    "dateUpdated": "2026-08-05T08:56:16.608Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2022-49768",
      "date": "2026-09-27",
      "epss": "0.00392",
      "percentile": "0.30694"
    },
    "nvd": {
      "cve": {
        "affected": [
          {
            "affectedData": [
              {
                "defaultStatus": "unaffected",
                "product": "Linux",
                "programFiles": [
                  "net/9p/trans_fd.c"
                ],
                "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
                "vendor": "Linux",
                "versions": [
                  {
                    "lessThan": "82825dbf393f7c7979d462f9609a15bde8092b3f",
                    "status": "affected",
                    "version": "eb1ca07f4343b4e58b97e792a85d5ba1ba103f5d",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "e3031280fe4eaf61a09e60823331f81f321be8e1",
                    "status": "affected",
                    "version": "4cd195263e420311d31451cc053fde8037f326f1",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "fec1406f5e7ab20b71f6d231792b0040e3300aaf",
                    "status": "affected",
                    "version": "9f476d7c540cb57556d3cc7e78704e6cd5100f5f",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "96760723aae1b45f733f702abb4333137143909f",
                    "status": "affected",
                    "version": "9f476d7c540cb57556d3cc7e78704e6cd5100f5f",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "f14858bc77c567e089965962877ee726ffad0556",
                    "status": "affected",
                    "version": "9f476d7c540cb57556d3cc7e78704e6cd5100f5f",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "a4f1a01b2e81378fce9ca528d4d8a049e4b58fcd",
                    "status": "affected",
                    "version": "9f476d7c540cb57556d3cc7e78704e6cd5100f5f",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "612c977f5d481f551d03d83d0aef588845c1300c",
                    "status": "affected",
                    "version": "9f476d7c540cb57556d3cc7e78704e6cd5100f5f",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "52f1c45dde9136f964d63a77d19826c8a74e2c7f",
                    "status": "affected",
                    "version": "9f476d7c540cb57556d3cc7e78704e6cd5100f5f",
                    "versionType": "git"
                  },
                  {
                    "status": "affected",
                    "version": "91ca7c5644c370dc5132b1db1aea81416a4b2181",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "4.9.334",
                    "status": "affected",
                    "version": "4.9.127",
                    "versionType": "semver"
                  },
                  {
                    "lessThan": "4.14.300",
                    "status": "affected",
                    "version": "4.14.70",
                    "versionType": "semver"
                  },
                  {
                    "lessThan": "4.19",
                    "status": "affected",
                    "version": "4.18.8",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "defaultStatus": "affected",
                "product": "Linux",
                "programFiles": [
                  "net/9p/trans_fd.c"
                ],
                "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
                "vendor": "Linux",
                "versions": [
                  {
                    "status": "affected",
                    "version": "4.19"
                  },
                  {
                    "lessThan": "4.19",
                    "status": "unaffected",
                    "version": "0",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "4.9.*",
                    "status": "unaffected",
                    "version": "4.9.334",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "4.14.*",
                    "status": "unaffected",
                    "version": "4.14.300",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "4.19.*",
                    "status": "unaffected",
                    "version": "4.19.267",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "5.4.*",
                    "status": "unaffected",
                    "version": "5.4.225",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "5.10.*",
                    "status": "unaffected",
                    "version": "5.10.156",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "5.15.*",
                    "status": "unaffected",
                    "version": "5.15.80",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "6.0.*",
                    "status": "unaffected",
                    "version": "6.0.10",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "*",
                    "status": "unaffected",
                    "version": "6.1",
                    "versionType": "original_commit_for_fix"
                  }
                ]
              }
            ],
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
          }
        ],
        "configurations": [
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "B7587EDA-4A51-4B15-A783-A1DB38A868C9",
                    "versionEndExcluding": "4.9.334",
                    "versionStartIncluding": "4.9.127",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "F69A3356-106C-4FCD-92EE-252AF7083E97",
                    "versionEndExcluding": "4.14.300",
                    "versionStartIncluding": "4.14.70",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "181921BB-6268-490B-B7EB-F70C9345FA21",
                    "versionEndExcluding": "4.19.267",
                    "versionStartIncluding": "4.18.8",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "94D21814-3051-4860-AB06-C7880A3D4933",
                    "versionEndExcluding": "5.4.225",
                    "versionStartIncluding": "4.20",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "E2152F3D-E6D3-405D-B0BE-911B8B6E2EE6",
                    "versionEndExcluding": "5.10.156",
                    "versionStartIncluding": "5.5",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "51BBEF3B-79F5-4D4C-ADBA-F34DA0E2465C",
                    "versionEndExcluding": "5.15.80",
                    "versionStartIncluding": "5.11",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "64F9ADD1-3ADB-4D66-A00F-4A83010B05F0",
                    "versionEndExcluding": "6.0.10",
                    "versionStartIncluding": "5.16",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ]
          }
        ],
        "cveTags": [],
        "descriptions": [
          {
            "lang": "en",
            "value": "In the Linux kernel, the following vulnerability has been resolved:\n\n9p: trans_fd/p9_conn_cancel: drop client lock earlier\n\nsyzbot reported a double-lock here and we no longer need this\nlock after requests have been moved off to local list:\njust drop the lock earlier."
          },
          {
            "lang": "es",
            "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: 9p: trans_fd/p9_conn_cancel: eliminar el bloqueo del cliente anteriormente. syzbot inform\u00f3 un bloqueo doble aqu\u00ed y ya no necesitamos este bloqueo despu\u00e9s de que las solicitudes se hayan movido a la lista local: simplemente elimine el bloqueo anteriormente."
          }
        ],
        "id": "CVE-2022-49768",
        "lastModified": "2026-08-04T10:17:55.907",
        "metrics": {
          "cvssMetricV31": [
            {
              "cvssData": {
                "attackComplexity": "LOW",
                "attackVector": "NETWORK",
                "availabilityImpact": "HIGH",
                "baseScore": 7.5,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "NONE",
                "integrityImpact": "NONE",
                "privilegesRequired": "NONE",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                "version": "3.1"
              },
              "exploitabilityScore": 3.9,
              "impactScore": 3.6,
              "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
              "type": "Secondary"
            },
            {
              "cvssData": {
                "attackComplexity": "LOW",
                "attackVector": "LOCAL",
                "availabilityImpact": "HIGH",
                "baseScore": 5.5,
                "baseSeverity": "MEDIUM",
                "confidentialityImpact": "NONE",
                "integrityImpact": "NONE",
                "privilegesRequired": "LOW",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                "version": "3.1"
              },
              "exploitabilityScore": 1.8,
              "impactScore": 3.6,
              "source": "nvd@nist.gov",
              "type": "Primary"
            }
          ]
        },
        "published": "2025-05-01T15:15:59.597",
        "references": [
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "tags": [
              "Patch"
            ],
            "url": "https://git.kernel.org/stable/c/52f1c45dde9136f964d63a77d19826c8a74e2c7f"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "tags": [
              "Patch"
            ],
            "url": "https://git.kernel.org/stable/c/612c977f5d481f551d03d83d0aef588845c1300c"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "tags": [
              "Patch"
            ],
            "url": "https://git.kernel.org/stable/c/82825dbf393f7c7979d462f9609a15bde8092b3f"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "tags": [
              "Patch"
            ],
            "url": "https://git.kernel.org/stable/c/96760723aae1b45f733f702abb4333137143909f"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "tags": [
              "Patch"
            ],
            "url": "https://git.kernel.org/stable/c/a4f1a01b2e81378fce9ca528d4d8a049e4b58fcd"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "tags": [
              "Patch"
            ],
            "url": "https://git.kernel.org/stable/c/e3031280fe4eaf61a09e60823331f81f321be8e1"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "tags": [
              "Patch"
            ],
            "url": "https://git.kernel.org/stable/c/f14858bc77c567e089965962877ee726ffad0556"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "tags": [
              "Patch"
            ],
            "url": "https://git.kernel.org/stable/c/fec1406f5e7ab20b71f6d231792b0040e3300aaf"
          }
        ],
        "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "vulnStatus": "Modified",
        "weaknesses": [
          {
            "description": [
              {
                "lang": "en",
                "value": "CWE-667"
              }
            ],
            "source": "nvd@nist.gov",
            "type": "Primary"
          }
        ]
      }
    },
    "redhat_vex": {
      "aggregate_severity": "Moderate",
      "current_release_date": "2026-08-04T19:41:51+00:00",
      "cve": "CVE-2022-49768",
      "id": "CVE-2022-49768",
      "initial_release_date": "2022-01-01T00:00:00+00:00",
      "product_status:known_affected": "14",
      "product_status:known_not_affected": "260",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "kernel: 9p: trans_fd/p9_conn_cancel: drop client lock earlier",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-49768.json",
      "version": "3"
    },
    "suse_vex": {
      "aggregate_severity": "moderate",
      "current_release_date": "2026-09-02T02:02:56Z",
      "cve": "CVE-2022-49768",
      "id": "CVE-2022-49768",
      "initial_release_date": "2025-05-09T04:55:36Z",
      "product_status:known_affected": "737",
      "product_status:known_not_affected": "137",
      "product_status:recommended": "23",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2022-49768",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2022-49768.json",
      "version": "30"
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.