VYPR
Medium severity5.5NVD Advisory· Published Feb 26, 2025· Updated Jun 17, 2026

CVE-2022-49366

CVE-2022-49366

Description

In the Linux kernel, the following vulnerability has been resolved:

ksmbd: fix reference count leak in smb_check_perm_dacl()

The issue happens in a specific path in smb_check_perm_dacl(). When "id" and "uid" have the same value, the function simply jumps out of the loop without decrementing the reference count of the object "posix_acls", which is increased by get_acl() earlier. This may result in memory leaks.

Fix it by decreasing the reference count of "posix_acls" before jumping to label "check_access_bits".

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

5
  • Linux/Kernel3 versions
    cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*range: >=5.15,<5.15.47
    • (no CPE)
    • (no CPE)range: 5.15
  • Linux/Ksmbdllm-fuzzy
  • osv-coords
    Range: >= 5.15.0, < 5.15.47

Patches

Vulnerability mechanics

References

4

News mentions

0

No linked articles in our index yet.