CVE-2022-50046

net/sunrpc: fix potential memory leaks in rpc_sysfs_xprt_state_change()

published June 18, 2025

CVSS
—
EPSS
0%
Percentile
8.3
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

net/sunrpc: fix potential memory leaks in rpc_sysfs_xprt_state_change()

The issue happens on some error handling paths. When the function

fails to grab the object `xprt`, it simply returns 0, forgetting to

decrease the reference count of another object `xps`, which is

increased by rpc_sysfs_xprt_kobj_get_xprt_switch(), causing refcount

leaks. Also, the function forgets to check whether `xps` is valid

before using it, which may result in NULL-dereferencing issues.

Fix it by adding proper error handling code when either `xprt` or

`xps` is NULL.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00191 · 8.3th percentile
Published
2025-06-18T11:01Z
EPSS history
Timeline
  • 18 JUN 11:01Z
    net/sunrpc: fix potential memory leaks in rpc_sysfs_xprt_state_change()
    cvelistv5