CVE-2022-49107

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2022-49107
In the Linux kernel, the following vulnerability has been resolved: ceph: fix memory leak in ceph_readdir when note_last_dentry returns error Reset the last_readdir at the same time, and add a comment explaining why we don't free last_readdir when dir_emit returns false.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/2fe82d3254029ef9ec4e7be890125d5ef4f537de Patch
https://git.kernel.org/stable/c/7f740ede35132d3d5d19747cad56a511d21bb156 Patch
https://git.kernel.org/stable/c/e792575b902a3939ca482491ee9fb3a236f99640 Patch
https://git.kernel.org/stable/c/f4429786129648a8f4bb1e5faa143c4478cc5c4a Patch
https://git.kernel.org/stable/c/f639d9867eea647005dc824e0e24f39ffc50d4e4 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

13 Mar 2025, 21:33

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/2fe82d3254029ef9ec4e7be890125d5ef4f537de - () https://git.kernel.org/stable/c/2fe82d3254029ef9ec4e7be890125d5ef4f537de - Patch
References () https://git.kernel.org/stable/c/7f740ede35132d3d5d19747cad56a511d21bb156 - () https://git.kernel.org/stable/c/7f740ede35132d3d5d19747cad56a511d21bb156 - Patch
References () https://git.kernel.org/stable/c/e792575b902a3939ca482491ee9fb3a236f99640 - () https://git.kernel.org/stable/c/e792575b902a3939ca482491ee9fb3a236f99640 - Patch
References () https://git.kernel.org/stable/c/f4429786129648a8f4bb1e5faa143c4478cc5c4a - () https://git.kernel.org/stable/c/f4429786129648a8f4bb1e5faa143c4478cc5c4a - Patch
References () https://git.kernel.org/stable/c/f639d9867eea647005dc824e0e24f39ffc50d4e4 - () https://git.kernel.org/stable/c/f639d9867eea647005dc824e0e24f39ffc50d4e4 - Patch
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: ceph: corrige pérdida de memoria en ceph_readdir cuando note_last_dentry devuelve un error. Restablece last_readdir al mismo tiempo y agrega un comentario que explica por qué no liberamos last_readdir cuando dir_emit devuelve falso.
CWE CWE-401
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
First Time Linux
Linux linux Kernel

26 Feb 2025, 07:00

Type Values Removed Values Added
New CVE
Information

Published : 2025-02-26 07:00

Updated : 2025-03-13 21:33

NVD link : CVE-2022-49107

Mitre link : CVE-2022-49107

CVE.ORG link : CVE-2022-49107

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-401

Missing Release of Memory after Effective Lifetime