CVE-2022-49768

In the Linux kernel, the following vulnerability has been resolved:

9p: trans_fd/p9_conn_cancel: drop client lock earlier

syzbot reported a double-lock here and we no longer need this lock after requests have been moved off to local list: just drop the lock earlier.

This vulnerability is rated as having Moderate impact because it requires local access and can only result in a denial of service via kernel deadlock. Typical Red Hat enterprise deployments do not utilize the 9P transport protocol by default, restricting potential exposure primarily to virtualized guest environments configuring Plan 9 shared filesystems. Furthermore, the issue cannot be leveraged for privilege escalation or unauthorized data access.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.