Debian: CVE-2022-49020: linux -- security update

Debian: CVE-2022-49020: linux -- security update

Severity

5

CVSS

(AV:L/AC:L/Au:S/C:N/I:N/A:C)

Published

10/23/2024

Created

10/24/2024

Added

10/23/2024

Modified

01/28/2025

Description

In the Linux kernel, the following vulnerability has been resolved: net/9p: Fix a potential socket leak in p9_socket_open Both p9_fd_create_tcp() and p9_fd_create_unix() will call p9_socket_open(). If the creation of p9_trans_fd fails, p9_fd_create_tcp() and p9_fd_create_unix() will return an error directly instead of releasing the cscoket, which will result in a socket leak. This patch adds sock_release() to fix the leak issue.

Solution(s)

• debian-upgrade-linux

References

• https://attackerkb.com/topics/cve-2022-49020
• CVE - 2022-49020