CVE-2022-48767

ceph: properly put ceph_string reference after async create attempt

State: Published
Severity: 5.3 Medium
Published: Jun 20, 2024
Updated: May 11, 2026
Reserved: Jun 20, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

ceph: properly put ceph_string reference after async create attempt

The reference acquired by try_prep_async_create is currently leaked. Ensure we put it.

Scores

CVSS	Score	Vector	Source
3.1	5.3 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L	CISA-ADP

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	9a8d03ca2e2c334d08ee91a3e07dcce31a02fdc6 to before e7be12ca7d3947765b0d7c1c7e0537e748da993aAffected 9a8d03ca2e2c334d08ee91a3e07dcce31a02fdc6 to before 36d433ae3242aa714176378850e6d1a5a3e78f18Affected 9a8d03ca2e2c334d08ee91a3e07dcce31a02fdc6 to before a0c22e970cd78b81c94691e6cb09713e8074d580Affected 9a8d03ca2e2c334d08ee91a3e07dcce31a02fdc6 to before 932a9b5870d38b87ba0a9923c804b1af7d3605b9Affected
LinuxLinux	5.7Affected before 5.7Not affected 5.10.96 through 5.10.Not affected 5.15.19 through 5.15.Not affected 5.16.5 through 5.16.*Not affected 5.17 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.