Vulnerability-Lookup

RHSA-2025:3961

Vulnerability from csaf_redhat - Published: 2025-04-16 19:59 - Updated: 2026-06-30 01:48

Summary

Red Hat Security Advisory: kpatch-patch-5_14_0-70_112_1, kpatch-patch-5_14_0-70_121_1, kpatch-patch-5_14_0-70_124_1, and kpatch-patch-5_14_0-70_85_1 security update

Severity

Important

Notes

Topic: An update for kpatch-patch-5_14_0-70_112_1, kpatch-patch-5_14_0-70_121_1, kpatch-patch-5_14_0-70_124_1, and kpatch-patch-5_14_0-70_85_1 is now available for Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Details: This is a kernel live patch module which can be loaded by the kpatch command line utility to modify the code of a running kernel. This patch module is targeted for kernel-5.14.0-70.85.1.el9_0. Security Fix(es): * kernel: cifs: fix potential double free during failed mount (CVE-2022-49541) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

CVE-2022-49541

A flaw was found in the Linux kernel's CIFS code in which a failed mount might lead to a double-free. An attacker with permissions to attempt to mount CIFS volumes could exploit this vulnerability to alter kernel memory, leading to a denial of service, altered system memory, or an escalation of privileges.

7.8 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-415 - Double Free

Affected products

Fixed 28 products

Product	Version	Remediation
Unresolved product id: BaseOS-9.0.0.Z.E4S:kpatch-patch-5_14_0-70_112_1-0:1-5.el9_0.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.0.0.Z.E4S:kpatch-patch-5_14_0-70_112_1-0:1-5.el9_0.src	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.0.0.Z.E4S:kpatch-patch-5_14_0-70_112_1-0:1-5.el9_0.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.0.0.Z.E4S:kpatch-patch-5_14_0-70_112_1-debuginfo-0:1-5.el9_0.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.0.0.Z.E4S:kpatch-patch-5_14_0-70_112_1-debuginfo-0:1-5.el9_0.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.0.0.Z.E4S:kpatch-patch-5_14_0-70_112_1-debugsource-0:1-5.el9_0.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.0.0.Z.E4S:kpatch-patch-5_14_0-70_112_1-debugsource-0:1-5.el9_0.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.0.0.Z.E4S:kpatch-patch-5_14_0-70_121_1-0:1-4.el9_0.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.0.0.Z.E4S:kpatch-patch-5_14_0-70_121_1-0:1-4.el9_0.src	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.0.0.Z.E4S:kpatch-patch-5_14_0-70_121_1-0:1-4.el9_0.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.0.0.Z.E4S:kpatch-patch-5_14_0-70_121_1-debuginfo-0:1-4.el9_0.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.0.0.Z.E4S:kpatch-patch-5_14_0-70_121_1-debuginfo-0:1-4.el9_0.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.0.0.Z.E4S:kpatch-patch-5_14_0-70_121_1-debugsource-0:1-4.el9_0.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.0.0.Z.E4S:kpatch-patch-5_14_0-70_121_1-debugsource-0:1-4.el9_0.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.0.0.Z.E4S:kpatch-patch-5_14_0-70_124_1-0:1-2.el9_0.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.0.0.Z.E4S:kpatch-patch-5_14_0-70_124_1-0:1-2.el9_0.src	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.0.0.Z.E4S:kpatch-patch-5_14_0-70_124_1-0:1-2.el9_0.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.0.0.Z.E4S:kpatch-patch-5_14_0-70_124_1-debuginfo-0:1-2.el9_0.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.0.0.Z.E4S:kpatch-patch-5_14_0-70_124_1-debuginfo-0:1-2.el9_0.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.0.0.Z.E4S:kpatch-patch-5_14_0-70_124_1-debugsource-0:1-2.el9_0.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.0.0.Z.E4S:kpatch-patch-5_14_0-70_124_1-debugsource-0:1-2.el9_0.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.0.0.Z.E4S:kpatch-patch-5_14_0-70_85_1-0:1-9.el9_0.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.0.0.Z.E4S:kpatch-patch-5_14_0-70_85_1-0:1-9.el9_0.src	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.0.0.Z.E4S:kpatch-patch-5_14_0-70_85_1-0:1-9.el9_0.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.0.0.Z.E4S:kpatch-patch-5_14_0-70_85_1-debuginfo-0:1-9.el9_0.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.0.0.Z.E4S:kpatch-patch-5_14_0-70_85_1-debuginfo-0:1-9.el9_0.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.0.0.Z.E4S:kpatch-patch-5_14_0-70_85_1-debugsource-0:1-9.el9_0.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.0.0.Z.E4S:kpatch-patch-5_14_0-70_85_1-debugsource-0:1-9.el9_0.x86_64	—	Vendor Fix fix Workaround

Threats

Impact Important

References

9 references

URL	Category
https://access.redhat.com/errata/RHSA-2025:3961	self
https://access.redhat.com/security/updates/classi…	external
https://bugzilla.redhat.com/show_bug.cgi?id=2348119	external
https://security.access.redhat.com/data/csaf/v2/a…	self
https://access.redhat.com/security/cve/CVE-2022-49541	self
https://bugzilla.redhat.com/show_bug.cgi?id=2348119	external
https://www.cve.org/CVERecord?id=CVE-2022-49541	external
https://nvd.nist.gov/vuln/detail/CVE-2022-49541	external
https://lore.kernel.org/linux-cve-announce/202502…	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for kpatch-patch-5_14_0-70_112_1, kpatch-patch-5_14_0-70_121_1, kpatch-patch-5_14_0-70_124_1, and kpatch-patch-5_14_0-70_85_1 is now available for Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "This is a kernel live patch module which can be loaded by the kpatch command line utility to modify the code of a running kernel.  This patch module is targeted for kernel-5.14.0-70.85.1.el9_0.\n\nSecurity Fix(es):\n\n* kernel: cifs: fix potential double free during failed mount (CVE-2022-49541)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2025:3961",
        "url": "https://access.redhat.com/errata/RHSA-2025:3961"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "2348119",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2348119"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_3961.json"
      }
    ],
    "title": "Red Hat Security Advisory: kpatch-patch-5_14_0-70_112_1, kpatch-patch-5_14_0-70_121_1, kpatch-patch-5_14_0-70_124_1, and kpatch-patch-5_14_0-70_85_1 security update",
    "tracking": {
      "current_release_date": "2026-06-30T01:48:51+00:00",
      "generator": {
        "date": "2026-06-30T01:48:51+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.3.0"
        }
      },
      "id": "RHSA-2025:3961",
      "initial_release_date": "2025-04-16T19:59:36+00:00",
      "revision_history": [
        {
          "date": "2025-04-16T19:59:36+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2025-04-16T19:59:36+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-06-30T01:48:51+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux BaseOS E4S (v.9.0)",
                "product": {
                  "name": "Red Hat Enterprise Linux BaseOS E4S (v.9.0)",
                  "product_id": "BaseOS-9.0.0.Z.E4S",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:rhel_e4s:9.0::baseos"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "kpatch-patch-5_14_0-70_85_1-0:1-9.el9_0.src",
                "product": {
                  "name": "kpatch-patch-5_14_0-70_85_1-0:1-9.el9_0.src",
                  "product_id": "kpatch-patch-5_14_0-70_85_1-0:1-9.el9_0.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-70_85_1@1-9.el9_0?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kpatch-patch-5_14_0-70_112_1-0:1-5.el9_0.src",
                "product": {
                  "name": "kpatch-patch-5_14_0-70_112_1-0:1-5.el9_0.src",
                  "product_id": "kpatch-patch-5_14_0-70_112_1-0:1-5.el9_0.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-70_112_1@1-5.el9_0?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kpatch-patch-5_14_0-70_121_1-0:1-4.el9_0.src",
                "product": {
                  "name": "kpatch-patch-5_14_0-70_121_1-0:1-4.el9_0.src",
                  "product_id": "kpatch-patch-5_14_0-70_121_1-0:1-4.el9_0.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-70_121_1@1-4.el9_0?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kpatch-patch-5_14_0-70_124_1-0:1-2.el9_0.src",
                "product": {
                  "name": "kpatch-patch-5_14_0-70_124_1-0:1-2.el9_0.src",
                  "product_id": "kpatch-patch-5_14_0-70_124_1-0:1-2.el9_0.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-70_124_1@1-2.el9_0?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "kpatch-patch-5_14_0-70_85_1-0:1-9.el9_0.ppc64le",
                "product": {
                  "name": "kpatch-patch-5_14_0-70_85_1-0:1-9.el9_0.ppc64le",
                  "product_id": "kpatch-patch-5_14_0-70_85_1-0:1-9.el9_0.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-70_85_1@1-9.el9_0?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kpatch-patch-5_14_0-70_85_1-debugsource-0:1-9.el9_0.ppc64le",
                "product": {
                  "name": "kpatch-patch-5_14_0-70_85_1-debugsource-0:1-9.el9_0.ppc64le",
                  "product_id": "kpatch-patch-5_14_0-70_85_1-debugsource-0:1-9.el9_0.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-70_85_1-debugsource@1-9.el9_0?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kpatch-patch-5_14_0-70_85_1-debuginfo-0:1-9.el9_0.ppc64le",
                "product": {
                  "name": "kpatch-patch-5_14_0-70_85_1-debuginfo-0:1-9.el9_0.ppc64le",
                  "product_id": "kpatch-patch-5_14_0-70_85_1-debuginfo-0:1-9.el9_0.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-70_85_1-debuginfo@1-9.el9_0?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kpatch-patch-5_14_0-70_112_1-0:1-5.el9_0.ppc64le",
                "product": {
                  "name": "kpatch-patch-5_14_0-70_112_1-0:1-5.el9_0.ppc64le",
                  "product_id": "kpatch-patch-5_14_0-70_112_1-0:1-5.el9_0.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-70_112_1@1-5.el9_0?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kpatch-patch-5_14_0-70_112_1-debugsource-0:1-5.el9_0.ppc64le",
                "product": {
                  "name": "kpatch-patch-5_14_0-70_112_1-debugsource-0:1-5.el9_0.ppc64le",
                  "product_id": "kpatch-patch-5_14_0-70_112_1-debugsource-0:1-5.el9_0.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-70_112_1-debugsource@1-5.el9_0?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kpatch-patch-5_14_0-70_112_1-debuginfo-0:1-5.el9_0.ppc64le",
                "product": {
                  "name": "kpatch-patch-5_14_0-70_112_1-debuginfo-0:1-5.el9_0.ppc64le",
                  "product_id": "kpatch-patch-5_14_0-70_112_1-debuginfo-0:1-5.el9_0.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-70_112_1-debuginfo@1-5.el9_0?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kpatch-patch-5_14_0-70_121_1-0:1-4.el9_0.ppc64le",
                "product": {
                  "name": "kpatch-patch-5_14_0-70_121_1-0:1-4.el9_0.ppc64le",
                  "product_id": "kpatch-patch-5_14_0-70_121_1-0:1-4.el9_0.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-70_121_1@1-4.el9_0?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kpatch-patch-5_14_0-70_121_1-debugsource-0:1-4.el9_0.ppc64le",
                "product": {
                  "name": "kpatch-patch-5_14_0-70_121_1-debugsource-0:1-4.el9_0.ppc64le",
                  "product_id": "kpatch-patch-5_14_0-70_121_1-debugsource-0:1-4.el9_0.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-70_121_1-debugsource@1-4.el9_0?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kpatch-patch-5_14_0-70_121_1-debuginfo-0:1-4.el9_0.ppc64le",
                "product": {
                  "name": "kpatch-patch-5_14_0-70_121_1-debuginfo-0:1-4.el9_0.ppc64le",
                  "product_id": "kpatch-patch-5_14_0-70_121_1-debuginfo-0:1-4.el9_0.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-70_121_1-debuginfo@1-4.el9_0?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kpatch-patch-5_14_0-70_124_1-0:1-2.el9_0.ppc64le",
                "product": {
                  "name": "kpatch-patch-5_14_0-70_124_1-0:1-2.el9_0.ppc64le",
                  "product_id": "kpatch-patch-5_14_0-70_124_1-0:1-2.el9_0.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-70_124_1@1-2.el9_0?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kpatch-patch-5_14_0-70_124_1-debugsource-0:1-2.el9_0.ppc64le",
                "product": {
                  "name": "kpatch-patch-5_14_0-70_124_1-debugsource-0:1-2.el9_0.ppc64le",
                  "product_id": "kpatch-patch-5_14_0-70_124_1-debugsource-0:1-2.el9_0.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-70_124_1-debugsource@1-2.el9_0?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kpatch-patch-5_14_0-70_124_1-debuginfo-0:1-2.el9_0.ppc64le",
                "product": {
                  "name": "kpatch-patch-5_14_0-70_124_1-debuginfo-0:1-2.el9_0.ppc64le",
                  "product_id": "kpatch-patch-5_14_0-70_124_1-debuginfo-0:1-2.el9_0.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-70_124_1-debuginfo@1-2.el9_0?arch=ppc64le"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "kpatch-patch-5_14_0-70_85_1-0:1-9.el9_0.x86_64",
                "product": {
                  "name": "kpatch-patch-5_14_0-70_85_1-0:1-9.el9_0.x86_64",
                  "product_id": "kpatch-patch-5_14_0-70_85_1-0:1-9.el9_0.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-70_85_1@1-9.el9_0?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kpatch-patch-5_14_0-70_85_1-debugsource-0:1-9.el9_0.x86_64",
                "product": {
                  "name": "kpatch-patch-5_14_0-70_85_1-debugsource-0:1-9.el9_0.x86_64",
                  "product_id": "kpatch-patch-5_14_0-70_85_1-debugsource-0:1-9.el9_0.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-70_85_1-debugsource@1-9.el9_0?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kpatch-patch-5_14_0-70_85_1-debuginfo-0:1-9.el9_0.x86_64",
                "product": {
                  "name": "kpatch-patch-5_14_0-70_85_1-debuginfo-0:1-9.el9_0.x86_64",
                  "product_id": "kpatch-patch-5_14_0-70_85_1-debuginfo-0:1-9.el9_0.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-70_85_1-debuginfo@1-9.el9_0?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kpatch-patch-5_14_0-70_112_1-0:1-5.el9_0.x86_64",
                "product": {
                  "name": "kpatch-patch-5_14_0-70_112_1-0:1-5.el9_0.x86_64",
                  "product_id": "kpatch-patch-5_14_0-70_112_1-0:1-5.el9_0.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-70_112_1@1-5.el9_0?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kpatch-patch-5_14_0-70_112_1-debugsource-0:1-5.el9_0.x86_64",
                "product": {
                  "name": "kpatch-patch-5_14_0-70_112_1-debugsource-0:1-5.el9_0.x86_64",
                  "product_id": "kpatch-patch-5_14_0-70_112_1-debugsource-0:1-5.el9_0.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-70_112_1-debugsource@1-5.el9_0?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kpatch-patch-5_14_0-70_112_1-debuginfo-0:1-5.el9_0.x86_64",
                "product": {
                  "name": "kpatch-patch-5_14_0-70_112_1-debuginfo-0:1-5.el9_0.x86_64",
                  "product_id": "kpatch-patch-5_14_0-70_112_1-debuginfo-0:1-5.el9_0.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-70_112_1-debuginfo@1-5.el9_0?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kpatch-patch-5_14_0-70_121_1-0:1-4.el9_0.x86_64",
                "product": {
                  "name": "kpatch-patch-5_14_0-70_121_1-0:1-4.el9_0.x86_64",
                  "product_id": "kpatch-patch-5_14_0-70_121_1-0:1-4.el9_0.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-70_121_1@1-4.el9_0?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kpatch-patch-5_14_0-70_121_1-debugsource-0:1-4.el9_0.x86_64",
                "product": {
                  "name": "kpatch-patch-5_14_0-70_121_1-debugsource-0:1-4.el9_0.x86_64",
                  "product_id": "kpatch-patch-5_14_0-70_121_1-debugsource-0:1-4.el9_0.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-70_121_1-debugsource@1-4.el9_0?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kpatch-patch-5_14_0-70_121_1-debuginfo-0:1-4.el9_0.x86_64",
                "product": {
                  "name": "kpatch-patch-5_14_0-70_121_1-debuginfo-0:1-4.el9_0.x86_64",
                  "product_id": "kpatch-patch-5_14_0-70_121_1-debuginfo-0:1-4.el9_0.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-70_121_1-debuginfo@1-4.el9_0?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kpatch-patch-5_14_0-70_124_1-0:1-2.el9_0.x86_64",
                "product": {
                  "name": "kpatch-patch-5_14_0-70_124_1-0:1-2.el9_0.x86_64",
                  "product_id": "kpatch-patch-5_14_0-70_124_1-0:1-2.el9_0.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-70_124_1@1-2.el9_0?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kpatch-patch-5_14_0-70_124_1-debugsource-0:1-2.el9_0.x86_64",
                "product": {
                  "name": "kpatch-patch-5_14_0-70_124_1-debugsource-0:1-2.el9_0.x86_64",
                  "product_id": "kpatch-patch-5_14_0-70_124_1-debugsource-0:1-2.el9_0.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-70_124_1-debugsource@1-2.el9_0?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kpatch-patch-5_14_0-70_124_1-debuginfo-0:1-2.el9_0.x86_64",
                "product": {
                  "name": "kpatch-patch-5_14_0-70_124_1-debuginfo-0:1-2.el9_0.x86_64",
                  "product_id": "kpatch-patch-5_14_0-70_124_1-debuginfo-0:1-2.el9_0.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-70_124_1-debuginfo@1-2.el9_0?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kpatch-patch-5_14_0-70_112_1-0:1-5.el9_0.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.0)",
          "product_id": "BaseOS-9.0.0.Z.E4S:kpatch-patch-5_14_0-70_112_1-0:1-5.el9_0.ppc64le"
        },
        "product_reference": "kpatch-patch-5_14_0-70_112_1-0:1-5.el9_0.ppc64le",
        "relates_to_product_reference": "BaseOS-9.0.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kpatch-patch-5_14_0-70_112_1-0:1-5.el9_0.src as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.0)",
          "product_id": "BaseOS-9.0.0.Z.E4S:kpatch-patch-5_14_0-70_112_1-0:1-5.el9_0.src"
        },
        "product_reference": "kpatch-patch-5_14_0-70_112_1-0:1-5.el9_0.src",
        "relates_to_product_reference": "BaseOS-9.0.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kpatch-patch-5_14_0-70_112_1-0:1-5.el9_0.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.0)",
          "product_id": "BaseOS-9.0.0.Z.E4S:kpatch-patch-5_14_0-70_112_1-0:1-5.el9_0.x86_64"
        },
        "product_reference": "kpatch-patch-5_14_0-70_112_1-0:1-5.el9_0.x86_64",
        "relates_to_product_reference": "BaseOS-9.0.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kpatch-patch-5_14_0-70_112_1-debuginfo-0:1-5.el9_0.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.0)",
          "product_id": "BaseOS-9.0.0.Z.E4S:kpatch-patch-5_14_0-70_112_1-debuginfo-0:1-5.el9_0.ppc64le"
        },
        "product_reference": "kpatch-patch-5_14_0-70_112_1-debuginfo-0:1-5.el9_0.ppc64le",
        "relates_to_product_reference": "BaseOS-9.0.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kpatch-patch-5_14_0-70_112_1-debuginfo-0:1-5.el9_0.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.0)",
          "product_id": "BaseOS-9.0.0.Z.E4S:kpatch-patch-5_14_0-70_112_1-debuginfo-0:1-5.el9_0.x86_64"
        },
        "product_reference": "kpatch-patch-5_14_0-70_112_1-debuginfo-0:1-5.el9_0.x86_64",
        "relates_to_product_reference": "BaseOS-9.0.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kpatch-patch-5_14_0-70_112_1-debugsource-0:1-5.el9_0.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.0)",
          "product_id": "BaseOS-9.0.0.Z.E4S:kpatch-patch-5_14_0-70_112_1-debugsource-0:1-5.el9_0.ppc64le"
        },
        "product_reference": "kpatch-patch-5_14_0-70_112_1-debugsource-0:1-5.el9_0.ppc64le",
        "relates_to_product_reference": "BaseOS-9.0.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kpatch-patch-5_14_0-70_112_1-debugsource-0:1-5.el9_0.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.0)",
          "product_id": "BaseOS-9.0.0.Z.E4S:kpatch-patch-5_14_0-70_112_1-debugsource-0:1-5.el9_0.x86_64"
        },
        "product_reference": "kpatch-patch-5_14_0-70_112_1-debugsource-0:1-5.el9_0.x86_64",
        "relates_to_product_reference": "BaseOS-9.0.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kpatch-patch-5_14_0-70_121_1-0:1-4.el9_0.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.0)",
          "product_id": "BaseOS-9.0.0.Z.E4S:kpatch-patch-5_14_0-70_121_1-0:1-4.el9_0.ppc64le"
        },
        "product_reference": "kpatch-patch-5_14_0-70_121_1-0:1-4.el9_0.ppc64le",
        "relates_to_product_reference": "BaseOS-9.0.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kpatch-patch-5_14_0-70_121_1-0:1-4.el9_0.src as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.0)",
          "product_id": "BaseOS-9.0.0.Z.E4S:kpatch-patch-5_14_0-70_121_1-0:1-4.el9_0.src"
        },
        "product_reference": "kpatch-patch-5_14_0-70_121_1-0:1-4.el9_0.src",
        "relates_to_product_reference": "BaseOS-9.0.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kpatch-patch-5_14_0-70_121_1-0:1-4.el9_0.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.0)",
          "product_id": "BaseOS-9.0.0.Z.E4S:kpatch-patch-5_14_0-70_121_1-0:1-4.el9_0.x86_64"
        },
        "product_reference": "kpatch-patch-5_14_0-70_121_1-0:1-4.el9_0.x86_64",
        "relates_to_product_reference": "BaseOS-9.0.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kpatch-patch-5_14_0-70_121_1-debuginfo-0:1-4.el9_0.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.0)",
          "product_id": "BaseOS-9.0.0.Z.E4S:kpatch-patch-5_14_0-70_121_1-debuginfo-0:1-4.el9_0.ppc64le"
        },
        "product_reference": "kpatch-patch-5_14_0-70_121_1-debuginfo-0:1-4.el9_0.ppc64le",
        "relates_to_product_reference": "BaseOS-9.0.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kpatch-patch-5_14_0-70_121_1-debuginfo-0:1-4.el9_0.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.0)",
          "product_id": "BaseOS-9.0.0.Z.E4S:kpatch-patch-5_14_0-70_121_1-debuginfo-0:1-4.el9_0.x86_64"
        },
        "product_reference": "kpatch-patch-5_14_0-70_121_1-debuginfo-0:1-4.el9_0.x86_64",
        "relates_to_product_reference": "BaseOS-9.0.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kpatch-patch-5_14_0-70_121_1-debugsource-0:1-4.el9_0.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.0)",
          "product_id": "BaseOS-9.0.0.Z.E4S:kpatch-patch-5_14_0-70_121_1-debugsource-0:1-4.el9_0.ppc64le"
        },
        "product_reference": "kpatch-patch-5_14_0-70_121_1-debugsource-0:1-4.el9_0.ppc64le",
        "relates_to_product_reference": "BaseOS-9.0.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kpatch-patch-5_14_0-70_121_1-debugsource-0:1-4.el9_0.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.0)",
          "product_id": "BaseOS-9.0.0.Z.E4S:kpatch-patch-5_14_0-70_121_1-debugsource-0:1-4.el9_0.x86_64"
        },
        "product_reference": "kpatch-patch-5_14_0-70_121_1-debugsource-0:1-4.el9_0.x86_64",
        "relates_to_product_reference": "BaseOS-9.0.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kpatch-patch-5_14_0-70_124_1-0:1-2.el9_0.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.0)",
          "product_id": "BaseOS-9.0.0.Z.E4S:kpatch-patch-5_14_0-70_124_1-0:1-2.el9_0.ppc64le"
        },
        "product_reference": "kpatch-patch-5_14_0-70_124_1-0:1-2.el9_0.ppc64le",
        "relates_to_product_reference": "BaseOS-9.0.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kpatch-patch-5_14_0-70_124_1-0:1-2.el9_0.src as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.0)",
          "product_id": "BaseOS-9.0.0.Z.E4S:kpatch-patch-5_14_0-70_124_1-0:1-2.el9_0.src"
        },
        "product_reference": "kpatch-patch-5_14_0-70_124_1-0:1-2.el9_0.src",
        "relates_to_product_reference": "BaseOS-9.0.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kpatch-patch-5_14_0-70_124_1-0:1-2.el9_0.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.0)",
          "product_id": "BaseOS-9.0.0.Z.E4S:kpatch-patch-5_14_0-70_124_1-0:1-2.el9_0.x86_64"
        },
        "product_reference": "kpatch-patch-5_14_0-70_124_1-0:1-2.el9_0.x86_64",
        "relates_to_product_reference": "BaseOS-9.0.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kpatch-patch-5_14_0-70_124_1-debuginfo-0:1-2.el9_0.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.0)",
          "product_id": "BaseOS-9.0.0.Z.E4S:kpatch-patch-5_14_0-70_124_1-debuginfo-0:1-2.el9_0.ppc64le"
        },
        "product_reference": "kpatch-patch-5_14_0-70_124_1-debuginfo-0:1-2.el9_0.ppc64le",
        "relates_to_product_reference": "BaseOS-9.0.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kpatch-patch-5_14_0-70_124_1-debuginfo-0:1-2.el9_0.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.0)",
          "product_id": "BaseOS-9.0.0.Z.E4S:kpatch-patch-5_14_0-70_124_1-debuginfo-0:1-2.el9_0.x86_64"
        },
        "product_reference": "kpatch-patch-5_14_0-70_124_1-debuginfo-0:1-2.el9_0.x86_64",
        "relates_to_product_reference": "BaseOS-9.0.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kpatch-patch-5_14_0-70_124_1-debugsource-0:1-2.el9_0.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.0)",
          "product_id": "BaseOS-9.0.0.Z.E4S:kpatch-patch-5_14_0-70_124_1-debugsource-0:1-2.el9_0.ppc64le"
        },
        "product_reference": "kpatch-patch-5_14_0-70_124_1-debugsource-0:1-2.el9_0.ppc64le",
        "relates_to_product_reference": "BaseOS-9.0.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kpatch-patch-5_14_0-70_124_1-debugsource-0:1-2.el9_0.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.0)",
          "product_id": "BaseOS-9.0.0.Z.E4S:kpatch-patch-5_14_0-70_124_1-debugsource-0:1-2.el9_0.x86_64"
        },
        "product_reference": "kpatch-patch-5_14_0-70_124_1-debugsource-0:1-2.el9_0.x86_64",
        "relates_to_product_reference": "BaseOS-9.0.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kpatch-patch-5_14_0-70_85_1-0:1-9.el9_0.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.0)",
          "product_id": "BaseOS-9.0.0.Z.E4S:kpatch-patch-5_14_0-70_85_1-0:1-9.el9_0.ppc64le"
        },
        "product_reference": "kpatch-patch-5_14_0-70_85_1-0:1-9.el9_0.ppc64le",
        "relates_to_product_reference": "BaseOS-9.0.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kpatch-patch-5_14_0-70_85_1-0:1-9.el9_0.src as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.0)",
          "product_id": "BaseOS-9.0.0.Z.E4S:kpatch-patch-5_14_0-70_85_1-0:1-9.el9_0.src"
        },
        "product_reference": "kpatch-patch-5_14_0-70_85_1-0:1-9.el9_0.src",
        "relates_to_product_reference": "BaseOS-9.0.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kpatch-patch-5_14_0-70_85_1-0:1-9.el9_0.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.0)",
          "product_id": "BaseOS-9.0.0.Z.E4S:kpatch-patch-5_14_0-70_85_1-0:1-9.el9_0.x86_64"
        },
        "product_reference": "kpatch-patch-5_14_0-70_85_1-0:1-9.el9_0.x86_64",
        "relates_to_product_reference": "BaseOS-9.0.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kpatch-patch-5_14_0-70_85_1-debuginfo-0:1-9.el9_0.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.0)",
          "product_id": "BaseOS-9.0.0.Z.E4S:kpatch-patch-5_14_0-70_85_1-debuginfo-0:1-9.el9_0.ppc64le"
        },
        "product_reference": "kpatch-patch-5_14_0-70_85_1-debuginfo-0:1-9.el9_0.ppc64le",
        "relates_to_product_reference": "BaseOS-9.0.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kpatch-patch-5_14_0-70_85_1-debuginfo-0:1-9.el9_0.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.0)",
          "product_id": "BaseOS-9.0.0.Z.E4S:kpatch-patch-5_14_0-70_85_1-debuginfo-0:1-9.el9_0.x86_64"
        },
        "product_reference": "kpatch-patch-5_14_0-70_85_1-debuginfo-0:1-9.el9_0.x86_64",
        "relates_to_product_reference": "BaseOS-9.0.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kpatch-patch-5_14_0-70_85_1-debugsource-0:1-9.el9_0.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.0)",
          "product_id": "BaseOS-9.0.0.Z.E4S:kpatch-patch-5_14_0-70_85_1-debugsource-0:1-9.el9_0.ppc64le"
        },
        "product_reference": "kpatch-patch-5_14_0-70_85_1-debugsource-0:1-9.el9_0.ppc64le",
        "relates_to_product_reference": "BaseOS-9.0.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kpatch-patch-5_14_0-70_85_1-debugsource-0:1-9.el9_0.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.0)",
          "product_id": "BaseOS-9.0.0.Z.E4S:kpatch-patch-5_14_0-70_85_1-debugsource-0:1-9.el9_0.x86_64"
        },
        "product_reference": "kpatch-patch-5_14_0-70_85_1-debugsource-0:1-9.el9_0.x86_64",
        "relates_to_product_reference": "BaseOS-9.0.0.Z.E4S"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2022-49541",
      "cwe": {
        "id": "CWE-415",
        "name": "Double Free"
      },
      "discovery_date": "2025-02-26T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2348119"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the Linux kernel\u0027s CIFS code in which a failed mount might lead to a double-free. An attacker with permissions to attempt to mount CIFS volumes could exploit this vulnerability to alter kernel memory, leading to a denial of service, altered system memory, or an escalation of privileges.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "kernel: cifs: fix potential double free during failed mount",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This flaw results from a missing check in the kernel\u0027s CIFS mounting code which can lead to the same pointer being freed twice when there is an error mounting the volume. An attacker could exploit this vulnerability to corrupt or alter system memory or execute arbitrary code with elevated privileges.\nNote that this vulnerability was fixed in previous errata:\nRHSA-2022:5819 for Red Hat Enterprise Linux 8.6 EUS\nRHSA-2022:7683 for Red Hat Enterprise Linux 8.7-8.10\nRHSA-2023:2458 for Red Hat Enterprise Linux 9.2 and later.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "BaseOS-9.0.0.Z.E4S:kpatch-patch-5_14_0-70_112_1-0:1-5.el9_0.ppc64le",
          "BaseOS-9.0.0.Z.E4S:kpatch-patch-5_14_0-70_112_1-0:1-5.el9_0.src",
          "BaseOS-9.0.0.Z.E4S:kpatch-patch-5_14_0-70_112_1-0:1-5.el9_0.x86_64",
          "BaseOS-9.0.0.Z.E4S:kpatch-patch-5_14_0-70_112_1-debuginfo-0:1-5.el9_0.ppc64le",
          "BaseOS-9.0.0.Z.E4S:kpatch-patch-5_14_0-70_112_1-debuginfo-0:1-5.el9_0.x86_64",
          "BaseOS-9.0.0.Z.E4S:kpatch-patch-5_14_0-70_112_1-debugsource-0:1-5.el9_0.ppc64le",
          "BaseOS-9.0.0.Z.E4S:kpatch-patch-5_14_0-70_112_1-debugsource-0:1-5.el9_0.x86_64",
          "BaseOS-9.0.0.Z.E4S:kpatch-patch-5_14_0-70_121_1-0:1-4.el9_0.ppc64le",
          "BaseOS-9.0.0.Z.E4S:kpatch-patch-5_14_0-70_121_1-0:1-4.el9_0.src",
          "BaseOS-9.0.0.Z.E4S:kpatch-patch-5_14_0-70_121_1-0:1-4.el9_0.x86_64",
          "BaseOS-9.0.0.Z.E4S:kpatch-patch-5_14_0-70_121_1-debuginfo-0:1-4.el9_0.ppc64le",
          "BaseOS-9.0.0.Z.E4S:kpatch-patch-5_14_0-70_121_1-debuginfo-0:1-4.el9_0.x86_64",
          "BaseOS-9.0.0.Z.E4S:kpatch-patch-5_14_0-70_121_1-debugsource-0:1-4.el9_0.ppc64le",
          "BaseOS-9.0.0.Z.E4S:kpatch-patch-5_14_0-70_121_1-debugsource-0:1-4.el9_0.x86_64",
          "BaseOS-9.0.0.Z.E4S:kpatch-patch-5_14_0-70_124_1-0:1-2.el9_0.ppc64le",
          "BaseOS-9.0.0.Z.E4S:kpatch-patch-5_14_0-70_124_1-0:1-2.el9_0.src",
          "BaseOS-9.0.0.Z.E4S:kpatch-patch-5_14_0-70_124_1-0:1-2.el9_0.x86_64",
          "BaseOS-9.0.0.Z.E4S:kpatch-patch-5_14_0-70_124_1-debuginfo-0:1-2.el9_0.ppc64le",
          "BaseOS-9.0.0.Z.E4S:kpatch-patch-5_14_0-70_124_1-debuginfo-0:1-2.el9_0.x86_64",
          "BaseOS-9.0.0.Z.E4S:kpatch-patch-5_14_0-70_124_1-debugsource-0:1-2.el9_0.ppc64le",
          "BaseOS-9.0.0.Z.E4S:kpatch-patch-5_14_0-70_124_1-debugsource-0:1-2.el9_0.x86_64",
          "BaseOS-9.0.0.Z.E4S:kpatch-patch-5_14_0-70_85_1-0:1-9.el9_0.ppc64le",
          "BaseOS-9.0.0.Z.E4S:kpatch-patch-5_14_0-70_85_1-0:1-9.el9_0.src",
          "BaseOS-9.0.0.Z.E4S:kpatch-patch-5_14_0-70_85_1-0:1-9.el9_0.x86_64",
          "BaseOS-9.0.0.Z.E4S:kpatch-patch-5_14_0-70_85_1-debuginfo-0:1-9.el9_0.ppc64le",
          "BaseOS-9.0.0.Z.E4S:kpatch-patch-5_14_0-70_85_1-debuginfo-0:1-9.el9_0.x86_64",
          "BaseOS-9.0.0.Z.E4S:kpatch-patch-5_14_0-70_85_1-debugsource-0:1-9.el9_0.ppc64le",
          "BaseOS-9.0.0.Z.E4S:kpatch-patch-5_14_0-70_85_1-debugsource-0:1-9.el9_0.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2022-49541"
        },
        {
          "category": "external",
          "summary": "RHBZ#2348119",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2348119"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2022-49541",
          "url": "https://www.cve.org/CVERecord?id=CVE-2022-49541"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-49541",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-49541"
        },
        {
          "category": "external",
          "summary": "https://lore.kernel.org/linux-cve-announce/2025022614-CVE-2022-49541-7460@gregkh/T",
          "url": "https://lore.kernel.org/linux-cve-announce/2025022614-CVE-2022-49541-7460@gregkh/T"
        }
      ],
      "release_date": "2025-02-26T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-04-16T19:59:36+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.",
          "product_ids": [
            "BaseOS-9.0.0.Z.E4S:kpatch-patch-5_14_0-70_112_1-0:1-5.el9_0.ppc64le",
            "BaseOS-9.0.0.Z.E4S:kpatch-patch-5_14_0-70_112_1-0:1-5.el9_0.src",
            "BaseOS-9.0.0.Z.E4S:kpatch-patch-5_14_0-70_112_1-0:1-5.el9_0.x86_64",
            "BaseOS-9.0.0.Z.E4S:kpatch-patch-5_14_0-70_112_1-debuginfo-0:1-5.el9_0.ppc64le",
            "BaseOS-9.0.0.Z.E4S:kpatch-patch-5_14_0-70_112_1-debuginfo-0:1-5.el9_0.x86_64",
            "BaseOS-9.0.0.Z.E4S:kpatch-patch-5_14_0-70_112_1-debugsource-0:1-5.el9_0.ppc64le",
            "BaseOS-9.0.0.Z.E4S:kpatch-patch-5_14_0-70_112_1-debugsource-0:1-5.el9_0.x86_64",
            "BaseOS-9.0.0.Z.E4S:kpatch-patch-5_14_0-70_121_1-0:1-4.el9_0.ppc64le",
            "BaseOS-9.0.0.Z.E4S:kpatch-patch-5_14_0-70_121_1-0:1-4.el9_0.src",
            "BaseOS-9.0.0.Z.E4S:kpatch-patch-5_14_0-70_121_1-0:1-4.el9_0.x86_64",
            "BaseOS-9.0.0.Z.E4S:kpatch-patch-5_14_0-70_121_1-debuginfo-0:1-4.el9_0.ppc64le",
            "BaseOS-9.0.0.Z.E4S:kpatch-patch-5_14_0-70_121_1-debuginfo-0:1-4.el9_0.x86_64",
            "BaseOS-9.0.0.Z.E4S:kpatch-patch-5_14_0-70_121_1-debugsource-0:1-4.el9_0.ppc64le",
            "BaseOS-9.0.0.Z.E4S:kpatch-patch-5_14_0-70_121_1-debugsource-0:1-4.el9_0.x86_64",
            "BaseOS-9.0.0.Z.E4S:kpatch-patch-5_14_0-70_124_1-0:1-2.el9_0.ppc64le",
            "BaseOS-9.0.0.Z.E4S:kpatch-patch-5_14_0-70_124_1-0:1-2.el9_0.src",
            "BaseOS-9.0.0.Z.E4S:kpatch-patch-5_14_0-70_124_1-0:1-2.el9_0.x86_64",
            "BaseOS-9.0.0.Z.E4S:kpatch-patch-5_14_0-70_124_1-debuginfo-0:1-2.el9_0.ppc64le",
            "BaseOS-9.0.0.Z.E4S:kpatch-patch-5_14_0-70_124_1-debuginfo-0:1-2.el9_0.x86_64",
            "BaseOS-9.0.0.Z.E4S:kpatch-patch-5_14_0-70_124_1-debugsource-0:1-2.el9_0.ppc64le",
            "BaseOS-9.0.0.Z.E4S:kpatch-patch-5_14_0-70_124_1-debugsource-0:1-2.el9_0.x86_64",
            "BaseOS-9.0.0.Z.E4S:kpatch-patch-5_14_0-70_85_1-0:1-9.el9_0.ppc64le",
            "BaseOS-9.0.0.Z.E4S:kpatch-patch-5_14_0-70_85_1-0:1-9.el9_0.src",
            "BaseOS-9.0.0.Z.E4S:kpatch-patch-5_14_0-70_85_1-0:1-9.el9_0.x86_64",
            "BaseOS-9.0.0.Z.E4S:kpatch-patch-5_14_0-70_85_1-debuginfo-0:1-9.el9_0.ppc64le",
            "BaseOS-9.0.0.Z.E4S:kpatch-patch-5_14_0-70_85_1-debuginfo-0:1-9.el9_0.x86_64",
            "BaseOS-9.0.0.Z.E4S:kpatch-patch-5_14_0-70_85_1-debugsource-0:1-9.el9_0.ppc64le",
            "BaseOS-9.0.0.Z.E4S:kpatch-patch-5_14_0-70_85_1-debugsource-0:1-9.el9_0.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2025:3961"
        },
        {
          "category": "workaround",
          "details": "Red Hat has investigated whether a possible mitigation exists for this issue, and has not been able to identify a practical example. Please update the affected package as soon as possible.",
          "product_ids": [
            "BaseOS-9.0.0.Z.E4S:kpatch-patch-5_14_0-70_112_1-0:1-5.el9_0.ppc64le",
            "BaseOS-9.0.0.Z.E4S:kpatch-patch-5_14_0-70_112_1-0:1-5.el9_0.src",
            "BaseOS-9.0.0.Z.E4S:kpatch-patch-5_14_0-70_112_1-0:1-5.el9_0.x86_64",
            "BaseOS-9.0.0.Z.E4S:kpatch-patch-5_14_0-70_112_1-debuginfo-0:1-5.el9_0.ppc64le",
            "BaseOS-9.0.0.Z.E4S:kpatch-patch-5_14_0-70_112_1-debuginfo-0:1-5.el9_0.x86_64",
            "BaseOS-9.0.0.Z.E4S:kpatch-patch-5_14_0-70_112_1-debugsource-0:1-5.el9_0.ppc64le",
            "BaseOS-9.0.0.Z.E4S:kpatch-patch-5_14_0-70_112_1-debugsource-0:1-5.el9_0.x86_64",
            "BaseOS-9.0.0.Z.E4S:kpatch-patch-5_14_0-70_121_1-0:1-4.el9_0.ppc64le",
            "BaseOS-9.0.0.Z.E4S:kpatch-patch-5_14_0-70_121_1-0:1-4.el9_0.src",
            "BaseOS-9.0.0.Z.E4S:kpatch-patch-5_14_0-70_121_1-0:1-4.el9_0.x86_64",
            "BaseOS-9.0.0.Z.E4S:kpatch-patch-5_14_0-70_121_1-debuginfo-0:1-4.el9_0.ppc64le",
            "BaseOS-9.0.0.Z.E4S:kpatch-patch-5_14_0-70_121_1-debuginfo-0:1-4.el9_0.x86_64",
            "BaseOS-9.0.0.Z.E4S:kpatch-patch-5_14_0-70_121_1-debugsource-0:1-4.el9_0.ppc64le",
            "BaseOS-9.0.0.Z.E4S:kpatch-patch-5_14_0-70_121_1-debugsource-0:1-4.el9_0.x86_64",
            "BaseOS-9.0.0.Z.E4S:kpatch-patch-5_14_0-70_124_1-0:1-2.el9_0.ppc64le",
            "BaseOS-9.0.0.Z.E4S:kpatch-patch-5_14_0-70_124_1-0:1-2.el9_0.src",
            "BaseOS-9.0.0.Z.E4S:kpatch-patch-5_14_0-70_124_1-0:1-2.el9_0.x86_64",
            "BaseOS-9.0.0.Z.E4S:kpatch-patch-5_14_0-70_124_1-debuginfo-0:1-2.el9_0.ppc64le",
            "BaseOS-9.0.0.Z.E4S:kpatch-patch-5_14_0-70_124_1-debuginfo-0:1-2.el9_0.x86_64",
            "BaseOS-9.0.0.Z.E4S:kpatch-patch-5_14_0-70_124_1-debugsource-0:1-2.el9_0.ppc64le",
            "BaseOS-9.0.0.Z.E4S:kpatch-patch-5_14_0-70_124_1-debugsource-0:1-2.el9_0.x86_64",
            "BaseOS-9.0.0.Z.E4S:kpatch-patch-5_14_0-70_85_1-0:1-9.el9_0.ppc64le",
            "BaseOS-9.0.0.Z.E4S:kpatch-patch-5_14_0-70_85_1-0:1-9.el9_0.src",
            "BaseOS-9.0.0.Z.E4S:kpatch-patch-5_14_0-70_85_1-0:1-9.el9_0.x86_64",
            "BaseOS-9.0.0.Z.E4S:kpatch-patch-5_14_0-70_85_1-debuginfo-0:1-9.el9_0.ppc64le",
            "BaseOS-9.0.0.Z.E4S:kpatch-patch-5_14_0-70_85_1-debuginfo-0:1-9.el9_0.x86_64",
            "BaseOS-9.0.0.Z.E4S:kpatch-patch-5_14_0-70_85_1-debugsource-0:1-9.el9_0.ppc64le",
            "BaseOS-9.0.0.Z.E4S:kpatch-patch-5_14_0-70_85_1-debugsource-0:1-9.el9_0.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "BaseOS-9.0.0.Z.E4S:kpatch-patch-5_14_0-70_112_1-0:1-5.el9_0.ppc64le",
            "BaseOS-9.0.0.Z.E4S:kpatch-patch-5_14_0-70_112_1-0:1-5.el9_0.src",
            "BaseOS-9.0.0.Z.E4S:kpatch-patch-5_14_0-70_112_1-0:1-5.el9_0.x86_64",
            "BaseOS-9.0.0.Z.E4S:kpatch-patch-5_14_0-70_112_1-debuginfo-0:1-5.el9_0.ppc64le",
            "BaseOS-9.0.0.Z.E4S:kpatch-patch-5_14_0-70_112_1-debuginfo-0:1-5.el9_0.x86_64",
            "BaseOS-9.0.0.Z.E4S:kpatch-patch-5_14_0-70_112_1-debugsource-0:1-5.el9_0.ppc64le",
            "BaseOS-9.0.0.Z.E4S:kpatch-patch-5_14_0-70_112_1-debugsource-0:1-5.el9_0.x86_64",
            "BaseOS-9.0.0.Z.E4S:kpatch-patch-5_14_0-70_121_1-0:1-4.el9_0.ppc64le",
            "BaseOS-9.0.0.Z.E4S:kpatch-patch-5_14_0-70_121_1-0:1-4.el9_0.src",
            "BaseOS-9.0.0.Z.E4S:kpatch-patch-5_14_0-70_121_1-0:1-4.el9_0.x86_64",
            "BaseOS-9.0.0.Z.E4S:kpatch-patch-5_14_0-70_121_1-debuginfo-0:1-4.el9_0.ppc64le",
            "BaseOS-9.0.0.Z.E4S:kpatch-patch-5_14_0-70_121_1-debuginfo-0:1-4.el9_0.x86_64",
            "BaseOS-9.0.0.Z.E4S:kpatch-patch-5_14_0-70_121_1-debugsource-0:1-4.el9_0.ppc64le",
            "BaseOS-9.0.0.Z.E4S:kpatch-patch-5_14_0-70_121_1-debugsource-0:1-4.el9_0.x86_64",
            "BaseOS-9.0.0.Z.E4S:kpatch-patch-5_14_0-70_124_1-0:1-2.el9_0.ppc64le",
            "BaseOS-9.0.0.Z.E4S:kpatch-patch-5_14_0-70_124_1-0:1-2.el9_0.src",
            "BaseOS-9.0.0.Z.E4S:kpatch-patch-5_14_0-70_124_1-0:1-2.el9_0.x86_64",
            "BaseOS-9.0.0.Z.E4S:kpatch-patch-5_14_0-70_124_1-debuginfo-0:1-2.el9_0.ppc64le",
            "BaseOS-9.0.0.Z.E4S:kpatch-patch-5_14_0-70_124_1-debuginfo-0:1-2.el9_0.x86_64",
            "BaseOS-9.0.0.Z.E4S:kpatch-patch-5_14_0-70_124_1-debugsource-0:1-2.el9_0.ppc64le",
            "BaseOS-9.0.0.Z.E4S:kpatch-patch-5_14_0-70_124_1-debugsource-0:1-2.el9_0.x86_64",
            "BaseOS-9.0.0.Z.E4S:kpatch-patch-5_14_0-70_85_1-0:1-9.el9_0.ppc64le",
            "BaseOS-9.0.0.Z.E4S:kpatch-patch-5_14_0-70_85_1-0:1-9.el9_0.src",
            "BaseOS-9.0.0.Z.E4S:kpatch-patch-5_14_0-70_85_1-0:1-9.el9_0.x86_64",
            "BaseOS-9.0.0.Z.E4S:kpatch-patch-5_14_0-70_85_1-debuginfo-0:1-9.el9_0.ppc64le",
            "BaseOS-9.0.0.Z.E4S:kpatch-patch-5_14_0-70_85_1-debuginfo-0:1-9.el9_0.x86_64",
            "BaseOS-9.0.0.Z.E4S:kpatch-patch-5_14_0-70_85_1-debugsource-0:1-9.el9_0.ppc64le",
            "BaseOS-9.0.0.Z.E4S:kpatch-patch-5_14_0-70_85_1-debugsource-0:1-9.el9_0.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "kernel: cifs: fix potential double free during failed mount"
    }
  ]
}

CVE-2022-49541 (GCVE-0-2022-49541)

Vulnerability from cvelistv5 – Published: 2025-02-26 02:13 – Updated: 2026-08-05 08:55

Title

cifs: fix potential double free during failed mount

Summary

In the Linux kernel, the following vulnerability has been resolved: cifs: fix potential double free during failed mount RHBZ: https://bugzilla.redhat.com/show_bug.cgi?id=2088799

Severity

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2025-10-01 19:37 UTC

CWE

CWE-415 - Double Free

Assigner

Linux mitre root

References

4 references

URL	Tags
https://git.kernel.org/stable/c/ce0008a0e410cdd95…
https://git.kernel.org/stable/c/9a167fc440e5693c1…
https://git.kernel.org/stable/c/ee71f8f1cd3c8c4a2…
https://git.kernel.org/stable/c/8378a51e3f8140f60…

Impacted products

2 products

Vendor	Product	Version
Linux	Linux	Affected: d17abdf7566566fc402c31899b353044a7ff3cf4 , < ce0008a0e410cdd95f0d8cd81b2902ec10a660c4 (git) Affected: d17abdf7566566fc402c31899b353044a7ff3cf4 , < 9a167fc440e5693c1cdd7f07071e05658bd9d89d (git) Affected: d17abdf7566566fc402c31899b353044a7ff3cf4 , < ee71f8f1cd3c8c4a251fd3e8abc89215ae3457cb (git) Affected: d17abdf7566566fc402c31899b353044a7ff3cf4 , < 8378a51e3f8140f60901fb27208cc7a6e47047b5 (git)
Linux	Linux	Affected: 5.11 Unaffected: 0 , < 5.11 (semver) Unaffected: 5.15.46 , ≤ 5.15.* (semver) Unaffected: 5.17.14 , ≤ 5.17.* (semver) Unaffected: 5.18.3 , ≤ 5.18.* (semver) Unaffected: 5.19 , ≤ * (original_commit_for_fix)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "HIGH",
              "baseScore": 7.8,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "LOW",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2022-49541",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-10-01T19:37:38.834933Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-415",
                "description": "CWE-415 Double Free",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-10-01T19:46:40.187Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "fs/cifs/cifsfs.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "ce0008a0e410cdd95f0d8cd81b2902ec10a660c4",
              "status": "affected",
              "version": "d17abdf7566566fc402c31899b353044a7ff3cf4",
              "versionType": "git"
            },
            {
              "lessThan": "9a167fc440e5693c1cdd7f07071e05658bd9d89d",
              "status": "affected",
              "version": "d17abdf7566566fc402c31899b353044a7ff3cf4",
              "versionType": "git"
            },
            {
              "lessThan": "ee71f8f1cd3c8c4a251fd3e8abc89215ae3457cb",
              "status": "affected",
              "version": "d17abdf7566566fc402c31899b353044a7ff3cf4",
              "versionType": "git"
            },
            {
              "lessThan": "8378a51e3f8140f60901fb27208cc7a6e47047b5",
              "status": "affected",
              "version": "d17abdf7566566fc402c31899b353044a7ff3cf4",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "fs/cifs/cifsfs.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "5.11"
            },
            {
              "lessThan": "5.11",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.46",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.17.*",
              "status": "unaffected",
              "version": "5.17.14",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.18.*",
              "status": "unaffected",
              "version": "5.18.3",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "5.19",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.46",
                  "versionStartIncluding": "5.11",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.17.14",
                  "versionStartIncluding": "5.11",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.18.3",
                  "versionStartIncluding": "5.11",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.19",
                  "versionStartIncluding": "5.11",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ncifs: fix potential double free during failed mount\n\nRHBZ: https://bugzilla.redhat.com/show_bug.cgi?id=2088799"
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "scenarios": [
            {
              "lang": "en",
              "value": "AV:L - The vulnerability is reached through the local mount path (mount syscall \u2192 smb3_get_tree \u2192 cifs_smb3_do_mount) or via local DFS automount path walking, not by processing unsolicited remote packets.\nAC:L - An attacker can reliably force the failing mount paths (e.g. controlled SMB target or crafted prefixpath causing cifs_get_root/cifs_read_super failure); the double-free fall-through is deterministic once hit, not dependent on uncontrolled conditions.\nPR:L - Although cifs lacks FS_USERNS_MOUNT so a direct mount needs CAP_SYS_ADMIN, unprivileged users can still reach cifs_smb3_do_mount via DFS automount (vfs_submount) on an already-mounted share, and CIFS mounts are commonly invoked by unprivileged users through mount helpers.\nUI:N - The attacker initiates the mount or DFS path access themselves; no separate victim interaction is required.\nS:U - This is standard in-kernel heap corruption within the host kernel\u0027s security authority, with no VM/IOMMU/sandbox boundary crossing.\nC:H - A double free of cifs_sb/ctx is heap memory corruption that enables object reuse and arbitrary kernel read primitives.\nI:H - Double free enables heap spraying and corruption of adjacent slab objects, providing write/control-flow hijacking primitives suitable for privilege escalation.\nA:H - The double free produces a use-after-free that can crash the kernel (KASAN UAF/oops), yielding high availability impact."
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-05T08:55:31.111Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/ce0008a0e410cdd95f0d8cd81b2902ec10a660c4"
        },
        {
          "url": "https://git.kernel.org/stable/c/9a167fc440e5693c1cdd7f07071e05658bd9d89d"
        },
        {
          "url": "https://git.kernel.org/stable/c/ee71f8f1cd3c8c4a251fd3e8abc89215ae3457cb"
        },
        {
          "url": "https://git.kernel.org/stable/c/8378a51e3f8140f60901fb27208cc7a6e47047b5"
        }
      ],
      "title": "cifs: fix potential double free during failed mount",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2022-49541",
    "datePublished": "2025-02-26T02:13:56.496Z",
    "dateReserved": "2025-02-26T02:08:31.589Z",
    "dateUpdated": "2026-08-05T08:55:31.111Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.