VDB
CVE-2022-49316
CVE-2022-49316
PUBLISHED
CVSS 5.5 MEDIUM
NFSv4: Don't hold the layoutget locks across multiple RPC calls
Reported by linux · Published February 26, 2025
In the Linux kernel, the following vulnerability has been resolved: NFSv4: Don't hold the layoutget locks across multiple RPC calls When doing layoutget as part of the open() compound, we have to be careful to release the layout locks before we can call any further RPC calls, such as setattr(). The reason is that those calls could trigger a recall, which could deadlock.
Risk scores
CVSS 3.1
5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Affected products
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux | 56f487f8c8fc5d6e582b79a86fc132d050129e15, 56f487f8c8fc5d6e582b79a86fc132d050129e15, 56f487f8c8fc5d6e582b79a86fc132d050129e15 |
| Linux | Linux | 4.18, 0, 4.19.247 |
| linux | linux_kernel | 4.18, 4.18, 4.18 |
| Linux | Linux | 56f487f8c8fc5d6e582b79a86fc132d050129e15, 56f487f8c8fc5d6e582b79a86fc132d050129e15, 56f487f8c8fc5d6e582b79a86fc132d050129e15 |
Timeline
- Feb 26, 2025 CVE Published
- Feb 27, 2025 EPSS Score (30 in total, the first dated here)
- May 23, 2026 Coalition ESS Score
- Jun 2, 2026 Security Advisory
- Jun 17, 2026 CVE Updated
Query this with the API
The same record, from the CLI:
vulnetix vdb vuln CVE-2022-49316
vulnetix vdb fixes CVE-2022-49316Or with curl, using the org id and key from your account page:
curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
"https://api.vdb.vulnetix.com/v2/vuln/CVE-2022-49316/fixes/registry"The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart