CVE-2022-48767 - OpenCVE

In the Linux kernel, the following vulnerability has been resolved: ceph: properly put ceph_string reference after async create attempt The reference acquired by try_prep_async_create is currently leaked. Ensure we put it.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact Low

Integrity Impact Low

Availability Impact Low

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact partial

No data.

No data.

No data.

References

Link	Providers
https://git.kernel.org/stable/c/36d433ae3242aa714176378850e6d1a5a3e78f18
https://git.kernel.org/stable/c/932a9b5870d38b87ba0a9923c804b1af7d3605b9
https://git.kernel.org/stable/c/a0c22e970cd78b81c94691e6cb09713e8074d580
https://git.kernel.org/stable/c/e7be12ca7d3947765b0d7c1c7e0537e748da993a
https://lore.kernel.org/linux-cve-announce/2024062010-CVE-2022-48767-e91d@gregkh/T
https://nvd.nist.gov/vuln/detail/CVE-2022-48767
https://www.cve.org/CVERecord?id=CVE-2022-48767

History

Wed, 30 Oct 2024 16:15:00 +0000

Type	Values Removed	Values Added
Metrics	cvssV3_1 `{'score': 6.1, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L'}`	ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}` cvssV3_1 `{'score': 5.3, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L'}`

MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2024-06-20T11:13:43.152Z

Updated: 2024-11-04T12:16:06.236Z

Reserved: 2024-06-20T11:09:39.060Z

Link: CVE-2022-48767

Vulnrichment

Updated: 2024-08-03T15:25:01.531Z

NVD

Status : Awaiting Analysis

Published: 2024-06-20T12:15:14.703

Modified: 2024-10-30T16:35:07.380

Link: CVE-2022-48767

Redhat

Severity : Low

Publid Date: 2024-06-20T00:00:00Z

Links: CVE-2022-48767 - Bugzilla

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2022-48767", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2024-06-20T11:09:39.060Z", "datePublished": "2024-06-20T11:13:43.152Z", "dateUpdated": "2024-11-04T12:16:06.236Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2024-11-04T12:16:06.236Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nceph: properly put ceph_string reference after async create attempt\n\nThe reference acquired by try_prep_async_create is currently leaked.\nEnsure we put it."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["fs/ceph/file.c"], "versions": [{"version": "9a8d03ca2e2c", "lessThan": "e7be12ca7d39", "status": "affected", "versionType": "git"}, {"version": "9a8d03ca2e2c", "lessThan": "36d433ae3242", "status": "affected", "versionType": "git"}, {"version": "9a8d03ca2e2c", "lessThan": "a0c22e970cd7", "status": "affected", "versionType": "git"}, {"version": "9a8d03ca2e2c", "lessThan": "932a9b5870d3", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["fs/ceph/file.c"], "versions": [{"version": "5.7", "status": "affected"}, {"version": "0", "lessThan": "5.7", "status": "unaffected", "versionType": "semver"}, {"version": "5.10.96", "lessThanOrEqual": "5.10.*", "status": "unaffected", "versionType": "semver"}, {"version": "5.15.19", "lessThanOrEqual": "5.15.*", "status": "unaffected", "versionType": "semver"}, {"version": "5.16.5", "lessThanOrEqual": "5.16.*", "status": "unaffected", "versionType": "semver"}, {"version": "5.17", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "references": [{"url": "https://git.kernel.org/stable/c/e7be12ca7d3947765b0d7c1c7e0537e748da993a"}, {"url": "https://git.kernel.org/stable/c/36d433ae3242aa714176378850e6d1a5a3e78f18"}, {"url": "https://git.kernel.org/stable/c/a0c22e970cd78b81c94691e6cb09713e8074d580"}, {"url": "https://git.kernel.org/stable/c/932a9b5870d38b87ba0a9923c804b1af7d3605b9"}], "title": "ceph: properly put ceph_string reference after async create attempt", "x_generator": {"engine": "bippy-9e1c9544281a"}}, "adp": [{"problemTypes": [{"descriptions": [{"type": "CWE", "lang": "en", "description": "CWE-noinfo Not enough information"}]}], "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.3, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "LOW", "privilegesRequired": "LOW", "confidentialityImpact": "LOW"}}, {"other": {"type": "ssvc", "content": {"timestamp": "2024-06-20T13:26:12.676837Z", "id": "CVE-2022-48767", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-10-30T15:59:59.271Z"}}, {"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-03T15:25:01.531Z"}, "title": "CVE Program Container", "references": [{"url": "https://git.kernel.org/stable/c/e7be12ca7d3947765b0d7c1c7e0537e748da993a", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/36d433ae3242aa714176378850e6d1a5a3e78f18", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/a0c22e970cd78b81c94691e6cb09713e8074d580", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/932a9b5870d38b87ba0a9923c804b1af7d3605b9", "tags": ["x_transferred"]}]}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://git.kernel.org/stable/c/e7be12ca7d3947765b0d7c1c7e0537e748da993a", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/36d433ae3242aa714176378850e6d1a5a3e78f18", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/a0c22e970cd78b81c94691e6cb09713e8074d580", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/932a9b5870d38b87ba0a9923c804b1af7d3605b9", "tags": ["x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-03T15:25:01.531Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.3, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "LOW", "privilegesRequired": "LOW", "confidentialityImpact": "LOW"}}, {"other": {"type": "ssvc", "content": {"id": "CVE-2022-48767", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-06-20T13:26:12.676837Z"}}}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "description": "CWE-noinfo Not enough information"}]}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-06-20T13:26:31.210Z"}}], "cna": {"title": "ceph: properly put ceph_string reference after async create attempt", "affected": [{"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "9a8d03ca2e2c", "lessThan": "e7be12ca7d39", "versionType": "git"}, {"status": "affected", "version": "9a8d03ca2e2c", "lessThan": "36d433ae3242", "versionType": "git"}, {"status": "affected", "version": "9a8d03ca2e2c", "lessThan": "a0c22e970cd7", "versionType": "git"}, {"status": "affected", "version": "9a8d03ca2e2c", "lessThan": "932a9b5870d3", "versionType": "git"}], "programFiles": ["fs/ceph/file.c"], "defaultStatus": "unaffected"}, {"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "5.7"}, {"status": "unaffected", "version": "0", "lessThan": "5.7", "versionType": "custom"}, {"status": "unaffected", "version": "5.10.96", "versionType": "custom", "lessThanOrEqual": "5.10.*"}, {"status": "unaffected", "version": "5.15.19", "versionType": "custom", "lessThanOrEqual": "5.15.*"}, {"status": "unaffected", "version": "5.16.5", "versionType": "custom", "lessThanOrEqual": "5.16.*"}, {"status": "unaffected", "version": "5.17", "versionType": "original_commit_for_fix", "lessThanOrEqual": "*"}], "programFiles": ["fs/ceph/file.c"], "defaultStatus": "affected"}], "references": [{"url": "https://git.kernel.org/stable/c/e7be12ca7d3947765b0d7c1c7e0537e748da993a"}, {"url": "https://git.kernel.org/stable/c/36d433ae3242aa714176378850e6d1a5a3e78f18"}, {"url": "https://git.kernel.org/stable/c/a0c22e970cd78b81c94691e6cb09713e8074d580"}, {"url": "https://git.kernel.org/stable/c/932a9b5870d38b87ba0a9923c804b1af7d3605b9"}], "x_generator": {"engine": "bippy-7d53e8ef8be4"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nceph: properly put ceph_string reference after async create attempt\n\nThe reference acquired by try_prep_async_create is currently leaked.\nEnsure we put it."}], "providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2024-06-20T11:15:02.723Z"}}}, "cveMetadata": {"cveId": "CVE-2022-48767", "state": "PUBLISHED", "dateUpdated": "2024-10-30T15:59:59.271Z", "dateReserved": "2024-06-20T11:09:39.060Z", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "datePublished": "2024-06-20T11:13:43.152Z", "assignerShortName": "Linux"}, "dataVersion": "5.1"}