cbcvebase.
CVE-2022-49316
published 2025-02-26

CVE-2022-49316: In the Linux kernel, the following vulnerability has been resolved: NFSv4: Don't hold the layoutget locks across multiple RPC calls When doing layoutget as…

PriorityP417medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.21%
11.5th percentile
In the Linux kernel, the following vulnerability has been resolved: NFSv4: Don't hold the layoutget locks across multiple RPC calls When doing layoutget as part of the open() compound, we have to be careful to release the layout locks before we can call any further RPC calls, such as setattr(). The reason is that those calls could trigger a recall, which could deadlock.

Affected

19 ranges
VendorProductVersion rangeFixed in
debianlinux< linux 5.18.5-1 (bookworm)linux 5.18.5-1 (bookworm)
linuxlinux——
linuxlinux>= 56f487f8c8fc5d6e582b79a86fc132d050129e15 < 6b3fc1496e7227cd6a39a80bbfb7588ef7c7a0106b3fc1496e7227cd6a39a80bbfb7588ef7c7a010
linuxlinux>= 56f487f8c8fc5d6e582b79a86fc132d050129e15 < a2b3be930e79cc5d9d829f158e31172b2043f0cda2b3be930e79cc5d9d829f158e31172b2043f0cd
linuxlinux>= 56f487f8c8fc5d6e582b79a86fc132d050129e15 < 0ee5b9644f06b4d3cdcd9544f43f63312e425a4c0ee5b9644f06b4d3cdcd9544f43f63312e425a4c
linuxlinux>= 56f487f8c8fc5d6e582b79a86fc132d050129e15 < d4c2a041ed3ba114502d5ed6ace5b1a48d637a8ed4c2a041ed3ba114502d5ed6ace5b1a48d637a8e
linuxlinux>= 56f487f8c8fc5d6e582b79a86fc132d050129e15 < 08d7a26d115cc7892668baa9750f64bd8baca29b08d7a26d115cc7892668baa9750f64bd8baca29b
linuxlinux>= 56f487f8c8fc5d6e582b79a86fc132d050129e15 < ea759ae0a9ae5acee677d722129710ac89cc59c1ea759ae0a9ae5acee677d722129710ac89cc59c1
linuxlinux>= 56f487f8c8fc5d6e582b79a86fc132d050129e15 < 6949493884fe88500de4af182588e071cf1544ee6949493884fe88500de4af182588e071cf1544ee
linuxlinux_kernel< 4.19.2474.19.247
linuxlinux_kernel>= 0 < 5.10.127-15.10.127-1
linuxlinux_kernel>= 0 < 5.18.5-15.18.5-1
linuxlinux_kernel>= 0 < 5.18.5-15.18.5-1
linuxlinux_kernel>= 0 < 5.18.5-15.18.5-1
linuxlinux_kernel>= 4.20 < 5.4.1985.4.198
linuxlinux_kernel>= 5.11 < 5.15.475.15.47
linuxlinux_kernel>= 5.16 < 5.17.155.17.15
linuxlinux_kernel>= 5.18 < 5.18.45.18.4
linuxlinux_kernel>= 5.5 < 5.10.1225.10.122

CVSS provenance

nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv5.5MEDIUM
vendor_debian5.5MEDIUM
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.