CVE-2022-49362CWE-416

CVE-2022-49362

Critical · published February 26, 2025

CVSS v3.1
9.8
EPSS
1%
Percentile
50.8
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

NFSD: Fix potential use-after-free in nfsd_file_put()

nfsd_file_put_noref() can free @nf, so don't dereference @nf

immediately upon return from nfsd_file_put_noref().

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00655 · 50.8th percentile
Weakness
CWE-416 · Use After Free
Published
2025-02-26T12:01Z
Affected products (2)
ProductVersionsFixed in
linux/linux_kernel≥ 5.18, < 5.18.45.18.4
linux/linux_kernelall versions—
References (4)
https://git.kernel.org/stable/c/261eabe19cb28e4a8587a4442d257b543d7c2d57 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/333dcc94ebf53f79f3dc0e7a7c16700bc7ff7e57 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/ada1757b259f353cade47037ee0a0249b4cddad3 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/b6c71c66b0ad8f2b59d9bc08c7a5079b110bec01 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67
EPSS history
Timeline
  • 26 FEB 02:11Z
    NFSD: Fix potential use-after-free in nfsd_file_put()
    cvelistv5