CVE-2022-49768: Linux Kernel

Medium severity, CVSS 5.5. EPSS: 0.4% chance of exploitation in the next 30 days.

In the Linux kernel, the following vulnerability has been resolved: 9p: trans_fd/p9_conn_cancel: drop client lock earlier syzbot reported a double-lock here and we no longer need this lock after requests have been moved off to local list: just drop the lock earlier.

Affected products

• Linux Linux Kernel: from 4.9.127, before 4.9.334 (fixed in 4.9.334); from 4.14.70, before 4.14.300 (fixed in 4.14.300); from 4.18.8, before 4.19.267 (fixed in 4.19.267); from 4.20, before 5.4.225 (fixed in 5.4.225); from 5.5, before 5.10.156 (fixed in 5.10.156); from 5.11, before 5.15.80 (fixed in 5.15.80); …

Published 2025-05-01. Last modified 2026-08-04.