{"affected":[{"defaultStatus":"unaffected","product":"Linux","source":"CNA: Linux","vendor":"Linux","versions":[{"lessThan":"9e3c9efa7caf16e5acc05eab5e4d0a714e1610b0","status":"affected","version":"9764c02fcbad40001fd3f63558d918e4d519bb75","versionType":"git"},{"lessThan":"38a6b469bf22f153282fbe7d702a24e9eb43f50e","status":"affected","version":"9764c02fcbad40001fd3f63558d918e4d519bb75","versionType":"git"},{"lessThan":"27893dfc1285f80f80f46b3b8c95f5d15d2e66d0","status":"affected","version":"9764c02fcbad40001fd3f63558d918e4d519bb75","versionType":"git"},{"status":"affected","version":"1ae6f05d4204d3a128bb9ba2c42e2a6c4ac687f1","versionType":"git"},{"lessThan":"4.14","status":"affected","version":"4.13.5","versionType":"semver"}]},{"defaultStatus":"affected","product":"Linux","source":"CNA: Linux","vendor":"Linux","versions":[{"status":"affected","version":"4.14"},{"lessThan":"4.14","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.66","versionType":"semver"},{"lessThanOrEqual":"5.19.*","status":"unaffected","version":"5.19.8","versionType":"semver"},{"lessThanOrEqual":"*","status":"unaffected","version":"6.0","versionType":"original_commit_for_fix"}]}],"cveId":"CVE-2022-49938","cwes":[],"description":"In the Linux kernel, the following vulnerability has been resolved:\n\ncifs: fix small mempool leak in SMB2_negotiate()\n\nIn some cases of failure (dialect mismatches) in SMB2_negotiate(), after\nthe request is sent, the checks would return -EIO when they should be\nrather setting rc = -EIO and jumping to neg_exit to free the response\nbuffer from mempool.","epss":{"date":"2026-11-05","percentile":0.07646,"score":0.0018},"exploits":[],"kev":null,"metrics":[],"modifiedAt":1793908812059,"publishedAt":1750244079458,"references":[{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/9e3c9efa7caf16e5acc05eab5e4d0a714e1610b0"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/38a6b469bf22f153282fbe7d702a24e9eb43f50e"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/27893dfc1285f80f80f46b3b8c95f5d15d2e66d0"}],"remediation":[],"revision":"55774f05f7bdad84b21a3976bfc8f1cfbd0e110a76c3f2817c703bba603c7547","sources":[{"modifiedAt":1793908812059,"name":"CNA: Linux","retrievedAt":1793909485285,"url":"https://www.cve.org/CVERecord?id=CVE-2022-49938"},{"modifiedAt":null,"name":"FIRST EPSS","retrievedAt":1793909521875,"url":"https://api.first.org/data/v1/epss?cve=CVE-2022-49938"}],"ssvc":{"assessedAt":1793908313449,"automatable":"no","exploitation":"none","source":"ADP: CISA-ADP","technicalImpact":"partial"},"status":"published","title":"cifs: fix small mempool leak in SMB2_negotiate()","updatedAt":1793909521875}