CVE-2022-49057
medium
CVSS v3
—
CVSS v2
—
VIR risk
5.5
Description
In the Linux kernel, the following vulnerability has been resolved: block: null_blk: end timed out poll request When poll request is timed out, it is removed from the poll list, but not completed, so the request is leaked, and never get chance to complete. Fix the issue by ending it in timeout handler.
Predictions
Exploit likelihood
20%
Patch ETA
—
Heuristic predictions, AS-IS, for prioritization only.
Mitigations
Vendor advisory: debian — https://security-tracker.debian.org/tracker/CVE-2022-49057
Vendor advisory: suse — https://www.suse.com/security/cve/CVE-2022-49057.html
Vendor advisory: redhat — https://access.redhat.com/errata/RHSA-2022:8267
OS impact
| OS | Version | Status | Fixed in |
|---|---|---|---|
| rhel | 9 | fixed | |
| sles | affected | | |
| debian | bookworm | fixed | 5.17.6-1 |
| debian | bullseye | fixed | 0 |
| debian | forky | fixed | 5.17.6-1 |
| debian | sid | fixed | 5.17.6-1 |
| debian | trixie | fixed | 5.17.6-1 |
References
Verify integrity in audit chain (admin only). AS-IS.