CVE-2022-49770
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk43th percentile - higher than 43% of all known CVEs
Summary
In the Linux kernel, the ceph module has a double-free vulnerability when decoding snaps fails. This can lead to random use-after-free, BUG_ON, or other issues.
Risk Assessment
The vulnerability can cause system crashes or unpredictable behavior, threatening system stability. It could be exploited locally to trigger a kernel panic.
Recommendation
Update the Linux kernel to a version with the fix for CVE-2022-49770. Also monitor system logs for error messages.
Original NVD description (English source)
In the Linux kernel, the following vulnerability has been resolved: ceph: avoid putting the realm twice when decoding snaps fails When decoding the snaps fails it maybe leaving the 'first_realm' and 'realm' pointing to the same snaprealm memory. And then it'll put it twice and could cause random use-after-free, BUG_ON, etc issues.