What’s Vulnerable › Vulnerabilities

CVE-2022-49064: cachefiles: unmark inode in use in error path

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-02-26 · updated 2026-06-17

Description

In the Linux kernel, the following vulnerability has been resolved: cachefiles: unmark inode in use in error path Unmark inode in use if error encountered. If the in-use flag leakage occurs in cachefiles_open_file(), Cachefiles will complain "Inode already in use" when later another cookie with the same index key is looked up. If the in-use flag leakage occurs in cachefiles_create_tmpfile(), though the "Inode already in use" warning won't be triggered, fix the leakage anyway.

Affected products

• Linux kernel: from 5.17 before 5.17.4; 5.18-rc1, 5.18-rc2 — fixed in 5.17.4

How to fix

Upgrade to a fixed version: Linux kernel 5.17.4. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/b2055abafd3d4ee0376fb3eed5cae866316995a1
• https://git.kernel.org/stable/c/ea5dc046127e857a7873ae55fd57c866e9e86fb2

Get alerted when CVE-2022-49064 or the next vulnerability affects your stack