CVE-2022-50059

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2022-50059
In the Linux kernel, the following vulnerability has been resolved: ceph: don't leak snap_rwsem in handle_cap_grant When handle_cap_grant is called on an IMPORT op, then the snap_rwsem is held and the function is expected to release it before returning. It currently fails to do that in all cases which could lead to a deadlock.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/58dd4385577ed7969b80cdc9e2a31575aba6c712 Patch
https://git.kernel.org/stable/c/a090cc69699ec2d11b5e34cee8c61f0d4b0068cb Patch
https://git.kernel.org/stable/c/aee18421bda6bf12a7cba6a3d7751c0e1cfd0094 Patch
https://git.kernel.org/stable/c/f546faa216d0f53a42ca73ba1fd8c48765b22d77 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

13 Nov 2025, 18:10

Type Values Removed Values Added
First Time Linux
Linux linux Kernel
References () https://git.kernel.org/stable/c/58dd4385577ed7969b80cdc9e2a31575aba6c712 - () https://git.kernel.org/stable/c/58dd4385577ed7969b80cdc9e2a31575aba6c712 - Patch
References () https://git.kernel.org/stable/c/a090cc69699ec2d11b5e34cee8c61f0d4b0068cb - () https://git.kernel.org/stable/c/a090cc69699ec2d11b5e34cee8c61f0d4b0068cb - Patch
References () https://git.kernel.org/stable/c/aee18421bda6bf12a7cba6a3d7751c0e1cfd0094 - () https://git.kernel.org/stable/c/aee18421bda6bf12a7cba6a3d7751c0e1cfd0094 - Patch
References () https://git.kernel.org/stable/c/f546faa216d0f53a42ca73ba1fd8c48765b22d77 - () https://git.kernel.org/stable/c/f546faa216d0f53a42ca73ba1fd8c48765b22d77 - Patch
CWE NVD-CWE-Other
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: ceph: no filtrar snap_rwsem en handle_cap_grant. Cuando se llama a handle_cap_grant en una operación IMPORT, se retiene el snap_rwsem y se espera que la función lo libere antes de regresar. Actualmente, esto no ocurre en todos los casos, lo que podría provocar un bloqueo.
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

18 Jun 2025, 11:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-06-18 11:15

Updated : 2025-11-13 18:10

NVD link : CVE-2022-50059

Mitre link : CVE-2022-50059

CVE.ORG link : CVE-2022-50059

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
NVD-CWE-Other