CVE-2022-49316

EPSS 0.21%
Veröffentlicht 26.02.2025 07:01:08
Zuletzt bearbeitet 01.10.2025 20:16:06
Quelle 416baaa9-dc9f-4396-8d5f-8c081f
CVE-Watchlists
Login
Unerledigt
Login

NFSv4: Don't hold the layoutget locks across multiple RPC calls

In the Linux kernel, the following vulnerability has been resolved:

NFSv4: Don't hold the layoutget locks across multiple RPC calls

When doing layoutget as part of the open() compound, we have to be
careful to release the layout locks before we can call any further RPC
calls, such as setattr(). The reason is that those calls could trigger
a recall, which could deadlock.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 10

NVD 6 VulnDex Vulnerability Enrichment 11

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Linux ≫ Linux Kernel Version < 4.19.247

Linux ≫ Linux Kernel Version >= 4.20 < 5.4.198

Linux ≫ Linux Kernel Version >= 5.5 < 5.10.122

Linux ≫ Linux Kernel Version >= 5.11 < 5.15.47

Linux ≫ Linux Kernel Version >= 5.16 < 5.17.15

Linux ≫ Linux Kernel Version >= 5.18 < 5.18.4

VulnDex Vulnerability Enrichment

Diese Information steht angemeldeten Benutzern zur Verfügung.

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.21%	0.106

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	5.5	1.8	3.6	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
134c704f-9b21-4f2e-91b3-4a467353bcc0	5.5	1.8	3.6	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H