In the Linux kernel, the following vulnerability has been resolved:
ceph: properly put ceph_string reference after async create attempt
The reference acquired by tryprepasync_create is currently leaked. Ensure we put it.
[
{
"id": "CVE-2022-48767-1d5ab0b9",
"signature_type": "Function",
"signature_version": "v1",
"target": {
"function": "ceph_atomic_open",
"file": "fs/ceph/file.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@36d433ae3242aa714176378850e6d1a5a3e78f18",
"deprecated": false,
"digest": {
"length": 3150.0,
"function_hash": "183070293061062123049814602525539781913"
}
},
{
"id": "CVE-2022-48767-a2392980",
"signature_type": "Line",
"signature_version": "v1",
"target": {
"file": "fs/ceph/file.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@36d433ae3242aa714176378850e6d1a5a3e78f18",
"deprecated": false,
"digest": {
"line_hashes": [
"235705766513301496436989826910657084465",
"115797436294409810968753190822099819042",
"141322276139261325936612214192917778159",
"6859478874625851411084356355898095831",
"215383265432035987111006015848855883702",
"103568275118115080489888434710216180861"
],
"threshold": 0.9
}
}
]