CVE-2022-50046
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
18/06/2025
Last modified:
18/06/2025
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
net/sunrpc: fix potential memory leaks in rpc_sysfs_xprt_state_change()<br />
<br />
The issue happens on some error handling paths. When the function<br />
fails to grab the object `xprt`, it simply returns 0, forgetting to<br />
decrease the reference count of another object `xps`, which is<br />
increased by rpc_sysfs_xprt_kobj_get_xprt_switch(), causing refcount<br />
leaks. Also, the function forgets to check whether `xps` is valid<br />
before using it, which may result in NULL-dereferencing issues.<br />
<br />
Fix it by adding proper error handling code when either `xprt` or<br />
`xps` is NULL.