CVE-2022-49103

CVSS 3.1 Score 5.5 of 10 (medium)

Details

Published Feb 26, 2025
Updated: Mar 13, 2025

Summary

CVE-2022-44103 is a vulnerability affecting the Linux kernel's NFSv4.2 implementation. The issue lies in the function _nfs42_proc_copy_notify(), where two error paths do not properly balance the reference count of an object named `ctx`. This omission can result in reference count leaks, potentially leading to memory inconsistencies and unintended behavior. The vulnerability has been rectified by ensuring that the refcount of `ctx` is balanced before the function returns in both error paths.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share