NVD Vulnerability Detail

CVE-2022-49020

Summary	In the Linux kernel, the following vulnerability has been resolved: net/9p: Fix a potential socket leak in p9_socket_open Both p9_fd_create_tcp() and p9_fd_create_unix() will call p9_socket_open(). If the creation of p9_trans_fd fails, p9_fd_create_tcp() and p9_fd_create_unix() will return an error directly instead of releasing the cscoket, which will result in a socket leak. This patch adds sock_release() to fix the leak issue.
Publication Date	Oct. 22, 2024, 5:15 a.m.
Registration Date	Oct. 22, 2024, 12:01 p.m.
Last Update	Oct. 25, 2024, 3:43 a.m.

Affected software configurations

Related information, measures and tools

No	URL	タグ
1	https://git.kernel.org/stable/c/0396227f4daf4792a6a8aaa3b7771dc25c4cd443	Patch
2	https://git.kernel.org/stable/c/ded893965b895b2dccd3d1436d8d3daffa23ea64	Patch
3	https://git.kernel.org/stable/c/8b14bd0b500aec1458b51cb621c8e5fab3304260	Patch
4	https://git.kernel.org/stable/c/2d24d91b9f44620824fc37b766f7cae00ca32748	Patch
5	https://git.kernel.org/stable/c/e01c1542379fb395e7da53706df598f38905dfbf	Patch
6	https://git.kernel.org/stable/c/8782b32ef867de7981bbe9e86ecb90e92e8780bd	Patch
7	https://git.kernel.org/stable/c/aa08323fe18cb7cf95317ffa2d54ca1de8e74ebd	Patch
8	https://git.kernel.org/stable/c/dcc14cfd7debe11b825cb077e75d91d2575b4cb8	Patch

Common Vulnerabilities List

No	CWE	Name	URL
1	CWE-401	有効期限後のメモリの解放の欠如	https://cwe.mitre.org/data/definitions/401.html

JVN Vulnerability Information

Linux の Linux Kernel における有効期限後のメモリの解放の欠如に関する脆弱性

Title	Linux の Linux Kernel における有効期限後のメモリの解放の欠如に関する脆弱性
Summary	Linux の Linux Kernel には、有効期限後のメモリの解放の欠如に関する脆弱性が存在します。
Possible impacts	サービス運用妨害 (DoS) 状態にされる可能性があります。
Solution	ベンダより正式な対策が公開されています。ベンダ情報を参照して適切な対策を実施してください。
Publication Date	Nov. 28, 2022, midnight
Registration Date	Oct. 25, 2024, 5:48 p.m.
Last Update	Oct. 25, 2024, 5:48 p.m.

Affected System

Linux

Linux Kernel 2.6.33 以上 4.9.335 未満

Linux Kernel 4.10 以上 4.14.301 未満

Linux Kernel 4.15 以上 4.19.268 未満

Linux Kernel 4.20 以上 5.4.226 未満

Linux Kernel 5.11 以上 5.15.82 未満

Linux Kernel 5.16 以上 6.0.12 未満

Linux Kernel 5.5 以上 5.10.158 未満

Linux Kernel 6.1

CVE (情報セキュリティ共通脆弱性識別子)

No	Name	URL
Common Vulnerabilities and Exposures (CVE)
1	CVE-2022-49020	https://www.cve.org/CVERecord?id=CVE-2022-49020
National Vulnerability Database (NVD)
2	CVE-2022-49020	https://nvd.nist.gov/vuln/detail/CVE-2022-49020

CWE (共通脆弱性タイプ一覧)

No	Name	URL
JVNDB
1	CWE-401	https://cwe.mitre.org/data/definitions/401.html

ベンダー情報

No	Name	URL
Kernel.org git repositories
1	net/9p: Fix a potential socket leak in p9_socket_open (0396227)	https://git.kernel.org/stable/c/0396227f4daf4792a6a8aaa3b7771dc25c4cd443
2	net/9p: Fix a potential socket leak in p9_socket_open (2d24d91)	https://git.kernel.org/stable/c/2d24d91b9f44620824fc37b766f7cae00ca32748
3	net/9p: Fix a potential socket leak in p9_socket_open (8782b32)	https://git.kernel.org/stable/c/8782b32ef867de7981bbe9e86ecb90e92e8780bd
4	net/9p: Fix a potential socket leak in p9_socket_open (8b14bd0)	https://git.kernel.org/stable/c/8b14bd0b500aec1458b51cb621c8e5fab3304260
5	net/9p: Fix a potential socket leak in p9_socket_open (aa08323)	https://git.kernel.org/stable/c/aa08323fe18cb7cf95317ffa2d54ca1de8e74ebd
6	net/9p: Fix a potential socket leak in p9_socket_open (dcc14cf)	https://git.kernel.org/stable/c/dcc14cfd7debe11b825cb077e75d91d2575b4cb8
7	net/9p: Fix a potential socket leak in p9_socket_open (ded8939)	https://git.kernel.org/stable/c/ded893965b895b2dccd3d1436d8d3daffa23ea64
8	net/9p: Fix a potential socket leak in p9_socket_open (e01c154)	https://git.kernel.org/stable/c/e01c1542379fb395e7da53706df598f38905dfbf
Linux Kernel
9	Linux Kernel Archives	https://www.kernel.org

Change Log

No	Changed Details	Date of change
1	[2024年10月25日] 掲載	Oct. 25, 2024, 5:48 p.m.