Bug 2320787 (CVE-2022-49020) - CVE-2022-49020 kernel: net/9p: Fix a potential socket leak in p9_socket_open
Summary: CVE-2022-49020 kernel: net/9p: Fix a potential socket leak in p9_socket_open
Keywords:
Status: NEW
Alias: CVE-2022-49020
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Product Security DevOps Team
QA Contact:
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2024-10-21 22:04 UTC by OSIDB Bzimport
Modified: 2024-10-22 05:28 UTC (History)
4 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed:
Embargoed:


Attachments (Terms of Use)

Description OSIDB Bzimport 2024-10-21 22:04:14 UTC
In the Linux kernel, the following vulnerability has been resolved:

net/9p: Fix a potential socket leak in p9_socket_open

Both p9_fd_create_tcp() and p9_fd_create_unix() will call
p9_socket_open(). If the creation of p9_trans_fd fails,
p9_fd_create_tcp() and p9_fd_create_unix() will return an
error directly instead of releasing the cscoket, which will
result in a socket leak.

This patch adds sock_release() to fix the leak issue.

Comment 1 Avinash Hanwate 2024-10-22 05:22:53 UTC
Upstream advisory:
https://lore.kernel.org/linux-cve-announce/2024102154-CVE-2022-49020-2d32@gregkh/T

Comment 2 Avinash Hanwate 2024-10-22 05:24:08 UTC
Upstream advisory:
https://lore.kernel.org/linux-cve-announce/2024102154-CVE-2022-49020-2d32@gregkh/T


Note You need to log in before you can comment on or make changes to this bug.