PT-2024-11875 · Linux+1 · Linux Kernel+1
Marc Dionne
·
Published
2022-11-30
·
Updated
2024-12-17
·
CVE-2022-49012
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 6.0.11
Description
The issue is related to a memory leak caused by the
afs put server function in the Linux kernel. Specifically, the atomic read was accidentally replaced with atomic inc return, which prevents the server from getting cleaned up and causes rmmod to hang with a warning. This warning is indicated by the message "Can't purge s=00000001". The estimated number of potentially affected devices is not provided.Recommendations
For Linux kernel versions prior to 6.0.11, upgrade to a version 6.0.11 or later to mitigate the risk of exploitation.
As a temporary workaround, consider restricting access to the
afs put server function until a patch is available.Exploit
Fix
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Linux Kernel
Suse