What’s Vulnerable › Vulnerabilities

CVE-2022-49097: NFS: Avoid writeback threads getting stuck in mempool_alloc()

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-02-26 · updated 2026-06-17
• Weakness: CWE-835

Description

In the Linux kernel, the following vulnerability has been resolved: NFS: Avoid writeback threads getting stuck in mempool_alloc() In a low memory situation, allow the NFS writeback code to fail without getting stuck in infinite loops in mempool_alloc().

Affected products

• Linux kernel: before 5.10.111; from 5.11 before 5.15.34; from 5.16 before 5.16.20; from 5.17 before 5.17.3 — fixed in 5.10.111, 5.15.34, 5.16.20, 5.17.3

How to fix

Upgrade to a fixed version: Linux kernel 5.10.111, 5.15.34, 5.16.20, 5.17.3. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/0bae835b63c53f86cdc524f5962e39409585b22c
• https://git.kernel.org/stable/c/1b3fa9a3c420c31e77b406ddc28f3a627100516c
• https://git.kernel.org/stable/c/a6caeddd68977a1aaaf62fbd1955b41dd5c3c5d3
• https://git.kernel.org/stable/c/c74e2f6ecc51bd08bb5b0335477dba954a50592e
• https://git.kernel.org/stable/c/ea029e4ce760f786919d06ef52efa2e50ea92a5f

Get alerted when CVE-2022-49097 or the next vulnerability affects your stack