---
id: CVE-2022-49938
title: 'cifs: fix small mempool leak in SMB2_negotiate()'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  cifs: fix small mempool leak in SMB2_negotiate()

  In some cases of failure (dialect mismatches) in SMB2_negotiate(), after
  the request is sent, the checks would return …
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= 9764c02fcbad40001fd3f63558d918e4d519bb75 <
    9e3c9efa7caf16e5acc05eab5e4d0a714e1610b0
  - >-
    Linux >= 9764c02fcbad40001fd3f63558d918e4d519bb75 <
    38a6b469bf22f153282fbe7d702a24e9eb43f50e
  - >-
    Linux >= 9764c02fcbad40001fd3f63558d918e4d519bb75 <
    27893dfc1285f80f80f46b3b8c95f5d15d2e66d0
  - Linux 1ae6f05d4204d3a128bb9ba2c42e2a6c4ac687f1
  - Linux >= 4.13.5 < 4.14
  - Linux 4.14
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-11-05T19:51:53.449829Z'
published: '2025-06-18'
updated: '2026-11-05'
sourceUpdated: '2026-11-05T20:00:12.059Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2022-49938'
references:
  - url: 'https://git.kernel.org/stable/c/9e3c9efa7caf16e5acc05eab5e4d0a714e1610b0'
  - url: 'https://git.kernel.org/stable/c/38a6b469bf22f153282fbe7d702a24e9eb43f50e'
  - url: 'https://git.kernel.org/stable/c/27893dfc1285f80f80f46b3b8c95f5d15d2e66d0'
tags:
  - cve.org
epss: 0.0018
epssPercentile: 0.07621
ingestedAt: '2026-11-05T22:38:31.628Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

cifs: fix small mempool leak in SMB2_negotiate()

In some cases of failure (dialect mismatches) in SMB2_negotiate(), after
the request is sent, the checks would return -EIO when they should be
rather setting rc = -EIO and jumping to neg_exit to free the response
buffer from mempool.

## Affected

- `Linux >= 9764c02fcbad40001fd3f63558d918e4d519bb75 < 9e3c9efa7caf16e5acc05eab5e4d0a714e1610b0`
- `Linux >= 9764c02fcbad40001fd3f63558d918e4d519bb75 < 38a6b469bf22f153282fbe7d702a24e9eb43f50e`
- `Linux >= 9764c02fcbad40001fd3f63558d918e4d519bb75 < 27893dfc1285f80f80f46b3b8c95f5d15d2e66d0`
- `Linux 1ae6f05d4204d3a128bb9ba2c42e2a6c4ac687f1`
- `Linux >= 4.13.5 < 4.14`
- `Linux 4.14`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.