CVE-2022-48628

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A flaw exists in the ceph handle caps() function within the fs/ceph/caps.c module of the Linux kernel's Ceph file system support. During the unmounting process, the system flushes dirty buffers and releases the last reference of i count after the final OSD request. Subsequently, it flushes dirty capabilities or snapshots to the Metadata Servers (MDS) without waiting for acknowledgments. This causes evict inodes() to skip certain inodes. If encryption is enabled, the kernel may generate a warning when removing encryption keys while skipped inodes still hold the keyring. Ultimately, the kernel crashes when iput() is called on these inodes, leading to a null pointer dereference of sb->s master keys which was already released by generic shutdown super(). This issue can lead to a denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.