cbcvebase.
CVE-2022-49366
published 2025-02-26

CVE-2022-49366: In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix reference count leak in smb_check_perm_dacl() The issue happens in a specific…

PriorityP418medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.26%
17.1th percentile
In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix reference count leak in smb_check_perm_dacl() The issue happens in a specific path in smb_check_perm_dacl(). When "id" and "uid" have the same value, the function simply jumps out of the loop without decrementing the reference count of the object "posix_acls", which is increased by get_acl() earlier. This may result in memory leaks. Fix it by decreasing the reference count of "posix_acls" before jumping to label "check_access_bits".

Affected

12 ranges
VendorProductVersion rangeFixed in
debianlinux< linux 5.18.5-1 (bookworm)linux 5.18.5-1 (bookworm)
linuxlinux——
linuxlinux>= 777cad1604d68ed4379ec899d1f7d2f6a29f01f0 < cf824b95c12a1abacadbc2d069931963221a3414cf824b95c12a1abacadbc2d069931963221a3414
linuxlinux>= 777cad1604d68ed4379ec899d1f7d2f6a29f01f0 < 248d71b440aef829f5cc5f6545ca113ef5062900248d71b440aef829f5cc5f6545ca113ef5062900
linuxlinux>= 777cad1604d68ed4379ec899d1f7d2f6a29f01f0 < 9758a6653c27867d810de02b4e5697163dda98839758a6653c27867d810de02b4e5697163dda9883
linuxlinux>= 777cad1604d68ed4379ec899d1f7d2f6a29f01f0 < d21a580dafc69aa04f46e6099616146a536b0724d21a580dafc69aa04f46e6099616146a536b0724
linuxlinux_kernel>= 0 < 5.18.5-15.18.5-1
linuxlinux_kernel>= 0 < 5.18.5-15.18.5-1
linuxlinux_kernel>= 0 < 5.18.5-15.18.5-1
linuxlinux_kernel>= 5.15 < 5.15.475.15.47
linuxlinux_kernel>= 5.16 < 5.17.155.17.15
linuxlinux_kernel>= 5.18 < 5.18.45.18.4

CVSS provenance

nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv5.5MEDIUM
vendor_debian5.5MEDIUM
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.