Back
CVE-2022-497689p: trans_fd/p9_conn_cancel: drop client lock earlier
- 7.5HighCVSS base score
- 0.40%Exploitation in 30 daysEPSS · top 65% of all CVEs
- NoKnown exploitednot in CISA's KEV catalog
- NonePublic exploitsnone known yet
Description
In the Linux kernel, the following vulnerability has been resolved: 9p: trans_fd/p9_conn_cancel: drop client lock earlier syzbot reported a double-lock here and we no longer need this lock after requests have been moved off to local list: just drop the lock earlier.
Timeline
ID reserved
By Linux
- 15 days later
· 15 days later
Published
- 15 months later
· 15 months later
Record updated
Changes after publication (a new score, a public exploit, EPSS crossing 1, 10 or 50 %, leaving KEV) are kept since November 2026; earlier ones are not known.
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| LinuxCNA (assigner) | 3.1 | High7.5 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
| NVDNVD · Modified | 3.1 | Medium5.5 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
- EPSS (exploitation in 30 days)
- 0.40% · top 65% of all CVEs (13 Nov 2026)
Loading the EPSS history…
The list uses the assigner's score when there is one, then CISA's, then NVD's: High 7.5.
Affected products
- affected eb1ca07f4343b4e58b97e792a85d5ba1ba103f5d – < 82825dbf393f7c7979d462f9609a15bde8092b3f
- affected 4cd195263e420311d31451cc053fde8037f326f1 – < e3031280fe4eaf61a09e60823331f81f321be8e1
- affected 9f476d7c540cb57556d3cc7e78704e6cd5100f5f – < fec1406f5e7ab20b71f6d231792b0040e3300aaf
- affected 9f476d7c540cb57556d3cc7e78704e6cd5100f5f – < 96760723aae1b45f733f702abb4333137143909f
- affected 9f476d7c540cb57556d3cc7e78704e6cd5100f5f – < f14858bc77c567e089965962877ee726ffad0556
- affected 9f476d7c540cb57556d3cc7e78704e6cd5100f5f – < a4f1a01b2e81378fce9ca528d4d8a049e4b58fcd
- affected 9f476d7c540cb57556d3cc7e78704e6cd5100f5f – < 612c977f5d481f551d03d83d0aef588845c1300c
- affected 9f476d7c540cb57556d3cc7e78704e6cd5100f5f – < 52f1c45dde9136f964d63a77d19826c8a74e2c7f
- affected 91ca7c5644c370dc5132b1db1aea81416a4b2181
- affected 4.9.127 – < 4.9.334
- affected 4.14.70 – < 4.14.300
- affected 4.18.8 – < 4.19
- affected 4.19
- unaffected < 4.19
- unaffected 4.9.334 – ≤ 4.9.*
- unaffected 4.14.300 – ≤ 4.14.*
- unaffected 4.19.267 – ≤ 4.19.*
- unaffected 5.4.225 – ≤ 5.4.*
- unaffected 5.10.156 – ≤ 5.10.*
- unaffected 5.15.80 – ≤ 5.15.*
- unaffected 6.0.10 – ≤ 6.0.*
- unaffected 6.1 – ≤ *
References
References8
- https://git.kernel.org/stable/c/82825dbf393f7c7979d462f9609a15bde8092b3f (opens in a new tab)
- https://git.kernel.org/stable/c/e3031280fe4eaf61a09e60823331f81f321be8e1 (opens in a new tab)
- https://git.kernel.org/stable/c/fec1406f5e7ab20b71f6d231792b0040e3300aaf (opens in a new tab)
- https://git.kernel.org/stable/c/96760723aae1b45f733f702abb4333137143909f (opens in a new tab)
- https://git.kernel.org/stable/c/f14858bc77c567e089965962877ee726ffad0556 (opens in a new tab)
- https://git.kernel.org/stable/c/a4f1a01b2e81378fce9ca528d4d8a049e4b58fcd (opens in a new tab)
- https://git.kernel.org/stable/c/612c977f5d481f551d03d83d0aef588845c1300c (opens in a new tab)
- https://git.kernel.org/stable/c/52f1c45dde9136f964d63a77d19826c8a74e2c7f (opens in a new tab)
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- EUVD EUVD-2025-13021 (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://cveledger.app/cve/CVE-2022-49768)Record last updated .