CVE-2022-49770

ceph: avoid putting the realm twice when decoding snaps fails

State: Published
Severity: 9.8 Critical
Published: May 1, 2025
Updated: Aug 15, 2026
Reserved: Apr 16, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

ceph: avoid putting the realm twice when decoding snaps fails

When decoding the snaps fails it maybe leaving the 'first_realm' and 'realm' pointing to the same snaprealm memory. And then it'll put it twice and could cause random use-after-free, BUG_ON, etc issues.

Scores

CVSS	Score	Vector	Source
3.1	9.8 Critical	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	982d6011bc30a26e8a3d546e0e7fc7db2c255d85 to before 274e4c79a3a2a24fba7cfe0e41113f1138785c37Affected 982d6011bc30a26e8a3d546e0e7fc7db2c255d85 to before cb7495fe957526555782ce0723f79ce92a6db22eAffected 982d6011bc30a26e8a3d546e0e7fc7db2c255d85 to before 044bc6d3c2c0e9090b0841e7b723875756534b45Affected 982d6011bc30a26e8a3d546e0e7fc7db2c255d85 to before 2f6e2de3a5289004650118b61f138fe7c28e1905Affected 982d6011bc30a26e8a3d546e0e7fc7db2c255d85 to before fd879c83e87735ab8f00ef7755752cf0cbae24b2Affected 982d6011bc30a26e8a3d546e0e7fc7db2c255d85 to before 51884d153f7ec85e18d607b2467820a90e0f4359Affected
LinuxLinux	4.0Affected before 4.0Not affected 4.19.268 through 4.19.Not affected 5.4.226 through 5.4.Not affected 5.10.157 through 5.10.Not affected 5.15.81 through 5.15.Not affected 6.0.10 through 6.0.*Not affected 6.1 and laterNot affected

Product

Versions

LinuxLinux

982d6011bc30a26e8a3d546e0e7fc7db2c255d85 to before 274e4c79a3a2a24fba7cfe0e41113f1138785c37Affected
982d6011bc30a26e8a3d546e0e7fc7db2c255d85 to before cb7495fe957526555782ce0723f79ce92a6db22eAffected
982d6011bc30a26e8a3d546e0e7fc7db2c255d85 to before 044bc6d3c2c0e9090b0841e7b723875756534b45Affected
982d6011bc30a26e8a3d546e0e7fc7db2c255d85 to before 2f6e2de3a5289004650118b61f138fe7c28e1905Affected
982d6011bc30a26e8a3d546e0e7fc7db2c255d85 to before fd879c83e87735ab8f00ef7755752cf0cbae24b2Affected
982d6011bc30a26e8a3d546e0e7fc7db2c255d85 to before 51884d153f7ec85e18d607b2467820a90e0f4359Affected

LinuxLinux

4.0Affected
before 4.0Not affected
4.19.268 through 4.19.*Not affected
5.4.226 through 5.4.*Not affected
5.10.157 through 5.10.*Not affected
5.15.81 through 5.15.*Not affected
6.0.10 through 6.0.*Not affected
6.1 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.