CVE-2022-49103: NFSv4.2: fix reference count leaks in _nfs42_proc_copy_notify()

Severity: medium (CVSS 5.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2025-02-26 · updated 2026-06-17

Description

In the Linux kernel, the following vulnerability has been resolved: NFSv4.2: fix reference count leaks in _nfs42_proc_copy_notify() [You don't often get email from xiongx18@fudan.edu.cn. Learn why this is important at http://aka.ms/LearnAboutSenderIdentification.] The reference counting issue happens in two error paths in the function _nfs42_proc_copy_notify(). In both error paths, the function simply returns the error code and forgets to balance the refcount of object `ctx`, bumped by get_nfs_open_context() earlier, which may cause refcount leaks. Fix it by balancing refcount of the `ctx` object before the function returns in both error paths.

Affected products

Linux kernel: before 5.10.111; from 5.11 before 5.15.34; from 5.16 before 5.16.20; from 5.17 before 5.17.3 — fixed in 5.10.111, 5.15.34, 5.16.20, 5.17.3

How to fix

Upgrade to a fixed version: Linux kernel 5.10.111, 5.15.34, 5.16.20, 5.17.3. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2022-49103 or the next vulnerability affects your stack