What’s Vulnerable › Vulnerabilities

CVE-2022-49822: cifs: Fix connections leak when tlink setup failed

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-05-01 · updated 2026-06-17
• Weakness: CWE-401

Description

In the Linux kernel, the following vulnerability has been resolved: cifs: Fix connections leak when tlink setup failed If the tlink setup failed, lost to put the connections, then the module refcnt leak since the cifsd kthread not exit. Also leak the fscache info, and for next mount with fsc, it will print the follow errors: CIFS: Cache volume key already in use (cifs,127.0.0.1:445,TEST) Let's check the result of tlink setup, and do some cleanup.

Affected products

• Linux kernel: from 5.0 before 5.15.81; from 5.16 before 6.0.10; 6.1-rc1, 6.1-rc2, 6.1-rc3, 6.1-rc4, 6.1-rc5 — fixed in 5.15.81, 6.0.10

How to fix

Upgrade to a fixed version: Linux kernel 5.15.81, 6.0.10. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/0a087842d10b5daa123ee5291e386cdd78413705
• https://git.kernel.org/stable/c/1dcdf5f5b2137185cbdd5385f29949ab3da4f00c
• https://git.kernel.org/stable/c/775d6625f96b26b90b9be9164b855ea2c471c0e5
• https://git.kernel.org/stable/c/a9059e338fc000c0b87d8cf29e93c74fd703212e

Get alerted when CVE-2022-49822 or the next vulnerability affects your stack