cifs: Fix xid leak in cifs_ses_add_channel() (Linux Linux)

CVE-2022-50856
Not available

At a glance

Source
NVD
EPSS
EPSS 0.20 % · percentile 10 ()
State
PUBLISHED
Published
Updated
Assigner
Linux
NVD status
Deferred

Description

In the Linux kernel, the following vulnerability has been resolved: cifs: Fix xid leak in cifs_ses_add_channel() Before return, should free the xid, otherwise, the xid will be leaked.

References

European references

CERT-FR advisories

Affected products

ProductVersions
Linux · Linuxaffected d70e9fa55884760b6d6c293dbf20d8c52ce11fb7 < 7286f875510486fdc2fc426b7c826262e2283a65 ; affected d70e9fa55884760b6d6c293dbf20d8c52ce11fb7 < 847301f0ee1c29f34cc48547ce1071990f24969c ; affected d70e9fa55884760b6d6c293dbf20d8c52ce11fb7 < db2a8b6c17e128d91f35d836c569f4a6bda4471b ; affected d70e9fa55884760b6d6c293dbf20d8c52ce11fb7 < e909d054bdea75ef1ec48c18c5936affdaecbb2c
Linux · Linuxaffected 5.5 ; unaffected 0 < 5.5 ; unaffected 5.10.152 ≤ 5.10.* ; unaffected 5.15.76 ≤ 5.15.* ; unaffected 6.0.6 ≤ 6.0.* ; unaffected 6.1 ≤ *

Sources

SourceLicence
CVE List (CVEProject cvelistV5)CVE Program Terms of Use
EPSS (FIRST.org)FIRST — attribution requested
ENISA EUVDENISA — reproduction authorised, source acknowledged
CERT-FR (ANSSI)Licence Ouverte / Etalab 2.0
NVD (NIST) via fkie-cad/nvd-json-data-feedsPublic domain — this product uses data from the NVD API but is not endorsed or certified by the NVD