CVE-2022-50059

ceph: don't leak snap_rwsem in handle_cap_grant

State: Published
Severity: 7.5 High
Published: Jun 18, 2025
Updated: Oct 15, 2026
Reserved: Jun 18, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

ceph: don't leak snap_rwsem in handle_cap_grant

When handle_cap_grant is called on an IMPORT op, then the snap_rwsem is held and the function is expected to release it before returning. It currently fails to do that in all cases which could lead to a deadlock.

Scores

CVSS	Score	Vector	Source
3.1	7.5 High	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	6f05b30ea063a2a05dda47a4105a69267ae5270f to before aee18421bda6bf12a7cba6a3d7751c0e1cfd0094Affected 6f05b30ea063a2a05dda47a4105a69267ae5270f to before f546faa216d0f53a42ca73ba1fd8c48765b22d77Affected 6f05b30ea063a2a05dda47a4105a69267ae5270f to before a090cc69699ec2d11b5e34cee8c61f0d4b0068cbAffected 6f05b30ea063a2a05dda47a4105a69267ae5270f to before 58dd4385577ed7969b80cdc9e2a31575aba6c712Affected
LinuxLinux	5.8Affected before 5.8Not affected 5.10.138 through 5.10.Not affected 5.15.63 through 5.15.Not affected 5.19.4 through 5.19.*Not affected 6.0 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.