What’s Vulnerable › Vulnerabilities

CVE-2022-49109: ceph: fix inode reference leakage in ceph_get_snapdir()

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-02-26 · updated 2026-08-13

Description

In the Linux kernel, the following vulnerability has been resolved: ceph: fix inode reference leakage in ceph_get_snapdir() The ceph_get_inode() will search for or insert a new inode into the hash for the given vino, and return a reference to it. If new is non-NULL, its reference is consumed. We should release the reference when in error handing cases.

Affected products

• Linux kernel: from 2.6.35 before 5.15.34; from 5.16 before 5.16.20; from 5.17 before 5.17.3; 2.6.34, 2.6.34-rc2, 2.6.34-rc3, 2.6.34-rc4, 2.6.34-rc5, 2.6.34-rc6 (+1) — fixed in 5.15.34, 5.16.20, 5.17.3

How to fix

Upgrade to a fixed version: Linux kernel 5.15.34, 5.16.20, 5.17.3. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/322794d3355c33adcc4feace0045d85a8e4ed813
• https://git.kernel.org/stable/c/3ae7163598c611a8892698e0c056fe794e52b44b
• https://git.kernel.org/stable/c/9cd21981dedfb4fe9f344529e4be35727cb10940
• https://git.kernel.org/stable/c/b2d9bb3f06abddefdfa740b0a604575b6797e1bf

Get alerted when CVE-2022-49109 or the next vulnerability affects your stack