CVE-2022-49107

Summary

CVE-2022-49107 is a vulnerability affecting the Linux kernel. It involves a memory leak issue in the ceph file system's ceph_readdir function. When note_last_dentry returns an error, the last_readdir variable is not reset, leading to a memory leak. To address this issue, the last_readdir variable is now reset, and a comment explaining the reason for not freeing last_readdir when dir_emit returns false has been added. This vulnerability could potentially be exploited by attackers to consume system resources and cause denial-of-service conditions. System administrators are advised to update their Linux kernels to the latest version to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.