CVE-2022-49362

CriticalCVSS 9.8

Published: 26/02/2025(UTC)Updated: 04/08/2026(UTC)Translated: 05/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.63%

47th percentile - higher than 47% of all known CVEs

Summary

In the Linux kernel, in the nfsd_file_put() function in NFSD, a potential use-after-free was fixed. Since nfsd_file_put_noref() can free @nf, it should not be dereferenced after return.

Risk Assessment

The vulnerability could lead to use-after-free, potentially causing system crashes or privilege escalation in NFS environments.

Recommendation

Install the updated Linux kernel with the fix for NFSD.

Original NVD description (English source)

In the Linux kernel, the following vulnerability has been resolved: NFSD: Fix potential use-after-free in nfsd_file_put() nfsd_file_put_noref() can free @nf, so don't dereference @nf immediately upon return from nfsd_file_put_noref().