---
id: CVE-2022-49178
title: |-
  In the Linux kernel, the following vulnerability has been resolved:

  memstick/mspro_block: fix handling of read-only devices

  Use set_disk_ro to propagate the read-only state to the block layer
  instead of checking for it in ->open and le…
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  memstick/mspro_block: fix handling of read-only devices

  Use set_disk_ro to propagate the read-only state to the block layer
  instead of checking for it in ->open and le…
severity: high
cvss: 7.8
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'
cwe:
  - CWE-401
vendor: linux
product: linux_kernel
affected:
  - linux_kernel < 5.16.19
  - 'linux_kernel >= 5.17, < 5.17.2'
patched:
  - linux_kernel 5.17.2
published: '2025-02-26'
updated: '2026-10-15'
sourceUpdated: '2026-10-15T22:17:24.073'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2022-49178'
references:
  - url: 'https://git.kernel.org/stable/c/057b53c4f87690d626203acef8b63d52a9bf2f43'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/6a0725b9d78ff6efdc95a37e4f05072e79c63918'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/6dab421bfe06a59bf8f212a72e34673e8acf2018'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
tags:
  - nvd
  - cve.org
epss: 0.0028
epssPercentile: 0.20328
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: total
  timestamp: '2026-10-15T21:17:57.075062Z'
ingestedAt: '2026-10-15T21:45:11.289Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

memstick/mspro_block: fix handling of read-only devices

Use set_disk_ro to propagate the read-only state to the block layer
instead of checking for it in ->open and leaking a reference in case
of a read-only device.

## Affected

- `linux_kernel < 5.16.19`
- `linux_kernel >= 5.17, < 5.17.2`

## Remediation

Upgrade past the affected range:

- `linux_kernel 5.17.2`