Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-48595 State: PUBLISHED Published: 2023-08-09T18:19:24.967Z Last Updated: 2024-10-10T14:41:13.157Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: ScienceLogic Products: SL 1 Problem Types: CWE-78 Description: A SQL injection vulnerability exists in the “ticket template watchers” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input and passes it directly to a SQL query. This allows for the injection of arbitrary SQL before being executed against the database. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.securifera.com/advisories/cve-2022-48595/
CVE ID: CVE-2022-48596 State: PUBLISHED Published: 2023-08-09T18:21:34.551Z Last Updated: 2024-10-10T14:40:43.223Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: ScienceLogic Products: SL 1 Problem Types: CWE-78 Description: A SQL injection vulnerability exists in the “ticket queue watchers” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input and passes it directly to a SQL query. This allows for the injection of arbitrary SQL before being executed against the database. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.securifera.com/advisories/cve-2022-48596/
CVE ID: CVE-2022-48597 State: PUBLISHED Published: 2023-08-09T18:23:45.708Z Last Updated: 2024-10-10T14:39:47.269Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: ScienceLogic Products: SL 1 Problem Types: CWE-78 Description: A SQL injection vulnerability exists in the “ticket event report” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input and passes it directly to a SQL query. This allows for the injection of arbitrary SQL before being executed against the database. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.securifera.com/advisories/cve-2022-48597/
CVE ID: CVE-2022-48598 State: PUBLISHED Published: 2023-08-09T18:25:02.473Z Last Updated: 2024-10-10T18:22:22.939Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: ScienceLogic Products: SL 1 Problem Types: CWE-78 Description: A SQL injection vulnerability exists in the “reporter events type date” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input and passes it directly to a SQL query. This allows for the injection of arbitrary SQL before being executed against the database. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.securifera.com/advisories/cve-2022-48598/
CVE ID: CVE-2022-48599 State: PUBLISHED Published: 2023-08-09T18:26:24.798Z Last Updated: 2024-10-09T20:50:26.916Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: ScienceLogic Products: SL 1 Problem Types: CWE-78 Description: A SQL injection vulnerability exists in the “reporter events type” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input and passes it directly to a SQL query. This allows for the injection of arbitrary SQL before being executed against the database. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.securifera.com/advisories/cve-2022-48599/
CVE ID: CVE-2022-48600 State: PUBLISHED Published: 2023-08-09T18:28:29.476Z Last Updated: 2024-10-09T20:48:30.146Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: ScienceLogic Products: SL 1 Problem Types: CWE-78 Description: A SQL injection vulnerability exists in the “notes view” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input and passes it directly to a SQL query. This allows for the injection of arbitrary SQL before being executed against the database. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.securifera.com/advisories/cve-2022-48600/
CVE ID: CVE-2022-48601 State: PUBLISHED Published: 2023-08-09T18:32:30.423Z Last Updated: 2024-10-09T20:45:22.897Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: ScienceLogic Products: SL 1 Problem Types: CWE-78 Description: A SQL injection vulnerability exists in the “network print report” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input and passes it directly to a SQL query. This allows for the injection of arbitrary SQL before being executed against the database. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.securifera.com/advisories/cve-2022-48601/
CVE ID: CVE-2022-48602 State: PUBLISHED Published: 2023-08-09T18:33:39.915Z Last Updated: 2024-10-10T12:48:53.896Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: ScienceLogic Products: SL 1 Problem Types: CWE-78 Description: A SQL injection vulnerability exists in the “message viewer print” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input and passes it directly to a SQL query. This allows for the injection of arbitrary SQL before being executed against the database. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.securifera.com/advisories/cve-2022-48602/
CVE ID: CVE-2022-48603 State: PUBLISHED Published: 2023-08-09T18:34:48.333Z Last Updated: 2024-10-10T12:48:32.241Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: ScienceLogic Products: SL 1 Problem Types: CWE-78 Description: A SQL injection vulnerability exists in the “message viewer iframe” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input and passes it directly to a SQL query. This allows for the injection of arbitrary SQL before being executed against the database. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.securifera.com/advisories/cve-2022-48603/
CVE ID: CVE-2022-48604 State: PUBLISHED Published: 2023-08-09T18:35:32.937Z Last Updated: 2024-10-10T12:48:06.441Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: ScienceLogic Products: SL 1 Problem Types: CWE-78 Description: A SQL injection vulnerability exists in the “logging export” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input and passes it directly to a SQL query. This allows for the injection of arbitrary SQL before being executed against the database. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.securifera.com/advisories/cve-2022-48604/
CVE ID: CVE-2022-48605 State: PUBLISHED Published: 2023-09-25T12:20:03.237Z Last Updated: 2024-09-24T15:07:53.562Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: CWE-20 Description: Input verification vulnerability in the fingerprint module. Successful exploitation of this vulnerability will affect confidentiality, integrity, and availability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2023/9/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202309-0000001638925158
CVE ID: CVE-2022-48606 State: PUBLISHED Published: 2023-09-26T01:27:26.749Z Last Updated: 2024-09-24T14:37:44.209Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: CWE-476 Description: Stability-related vulnerability in the binder background management and control module. Successful exploitation of this vulnerability may affect availability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2023/9/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202309-0000001638925158
CVE ID: CVE-2022-48610 State: PUBLISHED Published: 2025-03-10T19:37:48.949Z Last Updated: 2025-03-11T02:26:36.803Z Vendors: Apple Products: macOS, watchOS, iOS and iPadOS Problem Types: An app may be able to access user-sensitive data Description: This issue was addressed through improved state management. This issue is fixed in macOS Ventura 13.1, watchOS 9.2, iOS 16.2 and iPadOS 16.2. An app may be able to access user-sensitive data. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/102808 - https://support.apple.com/en-us/102741 - https://support.apple.com/en-us/102807
CVE ID: CVE-2022-48611 State: PUBLISHED Published: 2024-04-26T19:40:16.059Z Last Updated: 2024-09-06T17:48:52.571Z Vendors: Apple Products: iTunes for Windows Problem Types: A local attacker may be able to elevate their privileges Description: A logic issue was addressed with improved checks. This issue is fixed in iTunes 12.12.4 for Windows. A local attacker may be able to elevate their privileges. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.claris.com/s/answerview?anum=000041674&language=en_US
CVE ID: CVE-2022-48612 State: PUBLISHED Published: 2023-10-16T00:00:00 Last Updated: 2024-09-16T18:55:47.743Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Universal Cross Site Scripting (UXSS) vulnerability in ClassLink OneClick Extension through 10.7 allows remote attackers to inject JavaScript into any webpage, because a regular expression (validating whether a URL is controlled by ClassLink) is not present in all applicable places. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://blog.zerdle.net/classlink/
CVE ID: CVE-2022-48613 State: PUBLISHED Published: 2023-11-08T09:08:56.211Z Last Updated: 2024-09-04T19:10:17.357Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: CWE-362 Description: Race condition vulnerability in the kernel module. Successful exploitation of this vulnerability may cause variable values to be read with the condition evaluation bypassed. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2023/11/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202311-0000001729189597
CVE ID: CVE-2022-48614 State: PUBLISHED Published: 2023-12-10T00:00:00 Last Updated: 2024-08-03T15:17:55.372Z Vendors: n/a Products: n/a Problem Types: n/a Description: Special:Ask in Semantic MediaWiki before 4.0.2 allows Reflected XSS. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/SemanticMediaWiki/SemanticMediaWiki/issues/5262 - https://www.semantic-mediawiki.org/wiki/Semantic_MediaWiki_4.0.2
CVE ID: CVE-2022-48615 State: PUBLISHED Published: 2023-12-12T07:23:07.711Z Last Updated: 2024-08-03T15:17:55.529Z Severity: MEDIUM (CVSS 4.8 CVSS:3.1/AV:A/AC:H/PR:H/UI:N/S:U/C:L/I:H/A:N) Vendors: Huawei Products: AR6000 Problem Types: CWE-284 Description: An improper access control vulnerability exists in a Huawei datacom product. Attackers can exploit this vulnerability to obtain partial device information. Additional Analyst Notes: - CVE Program Container: References: - https://wr3nchsr.github.io/huawei-netengine-ar617vw-auth-root-rce/
CVE ID: CVE-2022-48616 State: PUBLISHED Published: 2023-12-12T07:25:05.938Z Last Updated: 2024-08-03T15:17:55.511Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:A/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Huawei Products: AR6000 Problem Types: CWE-78 Description: A Huawei data communication product has a command injection vulnerability. Successful exploitation of this vulnerability may allow attackers to gain higher privileges. Additional Analyst Notes: - CVE Program Container: References: - https://wr3nchsr.github.io/huawei-netengine-ar617vw-auth-root-rce/
CVE ID: CVE-2022-48618 State: PUBLISHED Published: 2024-01-09T17:58:59.097Z Last Updated: 2025-10-21T23:05:29.157Z Vendors: Apple Products: tvOS, macOS, iOS and iPadOS, watchOS Problem Types: An attacker with arbitrary read and write capability may be able to bypass Pointer Authentication. Apple is aware of a report that this issue may have been exploited against versions of iOS released before iOS 15.7.1. Description: The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.1, watchOS 9.2, iOS 16.2 and iPadOS 16.2, tvOS 16.2. An attacker with arbitrary read and write capability may be able to bypass Pointer Authentication. Apple is aware of a report that this is
rbitrary read and write capability may be able to bypass Pointer Authentication. Apple is aware of a report that this issue may have been exploited against versions of iOS released before iOS 15.7.1. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.apple.com/en-us/HT213535 - https://support.apple.com/en-us/HT213532 - https://support.apple.com/en-us/HT213530 - https://support.apple.com/en-us/HT213536
CVE ID: CVE-2022-48619 State: PUBLISHED Published: 2024-01-12T00:00:00 Last Updated: 2024-09-03T18:16:34.468Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in drivers/input/input.c in the Linux kernel before 5.17.10. An attacker can cause a denial of service (panic) because input_set_capability mishandles the situation in which an event code falls outside of a bitmap. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/torvalds/linux/commit/409353cbe9fe48f6bc196114c442b1cff05a39bc - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.17.10
CVE ID: CVE-2022-48620 State: PUBLISHED Published: 2024-01-12T00:00:00.000Z Last Updated: 2025-06-03T14:06:55.282Z Vendors: n/a Products: n/a Problem Types: n/a Description: uev (aka libuev) before 2.4.1 has a buffer overflow in epoll_wait if maxevents is a large number. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/troglobit/libuev/issues/27 - https://github.com/troglobit/libuev/compare/v2.4.0...v2.4.1 - https://github.com/troglobit/libuev/commit/2d9f1c9ce655cc38511aeeb6e95ac30914f7aec9 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2J4UB4KXWCCTZCE53B6SFIREZ57INK7T/ - https://l
oject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2J4UB4KXWCCTZCE53B6SFIREZ57INK7T/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/P2XZESYGE6XDWAPFUOX26ZWJV2JWMMM5/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/E6RLVLJGDKTEVJP446TFDANHB4LHRAOP/
CVE ID: CVE-2022-48621 State: PUBLISHED Published: 2024-02-18T06:14:48.097Z Last Updated: 2024-12-06T21:18:23.488Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: CWE-306 Description: Vulnerability of missing authentication for critical functions in the Wi-Fi module.Successful exploitation of this vulnerability may affect service confidentiality. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://consumer.huawei.com/en/support/bulletin/2024/2/ - https://device.harmonyos.com/cn/docs/security/update/security-bulletins-202402-0000001834855405
CVE ID: CVE-2022-48622 State: PUBLISHED Published: 2024-01-26T00:00:00 Last Updated: 2024-08-26T19:25:00.545Z Vendors: n/a Products: n/a Problem Types: n/a Description: In GNOME GdkPixbuf (aka gdk-pixbuf) through 2.42.10, the ANI (Windows animated cursor) decoder encounters heap memory corruption (in ani_load_chunk in io-ani.c) when parsing chunks in a crafted .ani file. A crafted file could allow an attacker to overwrite heap metadata, leading to a denial of service or code execution attack. This occurs in gdk_pixbuf_set_option() in gdk-pixbuf.c. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gitlab.gnome.org/GNOME/gdk-pixbuf/-/issues/202
CVE ID: CVE-2022-48623 State: PUBLISHED Published: 2024-02-13T00:00:00 Last Updated: 2024-08-19T16:01:50.905Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Cpanel::JSON::XS package before 4.33 for Perl performs out-of-bounds accesses in a way that allows attackers to obtain sensitive information or cause a denial of service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://metacpan.org/release/RURBAN/Cpanel-JSON-XS-4.33/changes - https://github.com/briandfoy/cpan-security-advisory/blob/9374f98bef51e1ae887f293234050551c079776f/cpansa/CPANSA-Cpanel-JSON-XS.yml#L25-L36 - https://github.com/rurban/Cpanel-JSON-XS/issues/208 - https
234050551c079776f/cpansa/CPANSA-Cpanel-JSON-XS.yml#L25-L36 - https://github.com/rurban/Cpanel-JSON-XS/issues/208 - https://github.com/rurban/Cpanel-JSON-XS/commit/41f32396eee9395a40f9ed80145c37622560de9b
CVE ID: CVE-2022-48624 State: PUBLISHED Published: 2024-02-19T00:00:00.000Z Last Updated: 2025-03-27T14:21:35.466Z Vendors: n/a Products: n/a Problem Types: n/a Description: close_altfile in filename.c in less before 606 omits shell_quote calls for LESSCLOSE. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/gwsw/less/commit/c6ac6de49698be84d264a0c4c0c40bb870b10144 - https://greenwoodsoftware.com/less/ - https://github.com/gwsw/less/compare/v605...v606 - https://security.netapp.com/advisory/ntap-20240605-0010/ - https://lists.debian.org/debian-lts-announce/2024/05/msg00018.html
CVE ID: CVE-2022-48625 State: PUBLISHED Published: 2024-02-19T00:00:00 Last Updated: 2024-08-29T15:23:31.208Z Vendors: n/a Products: n/a Problem Types: n/a Description: Yealink Config Encrypt Tool add RSA before 1.2 has a built-in RSA key pair, and thus there is a risk of decryption by an adversary. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.yealink.com/en/trust-center/security-advisories/yealink-config-encrypt-tool-hardcoded-encryption-password-vulnerability
CVE ID: CVE-2022-48626 State: PUBLISHED Published: 2024-02-25T14:03:41.576Z Last Updated: 2025-05-04T08:20:00.944Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: moxart: fix potential use-after-free on remove path It was reported that the mmc host structure could be accessed after it was freed in moxart_remove(), so fix this by saving the base register of the device and using it instead of the pointer dereference. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/f5dc193167591e88797262ec78515a0cbe79ff5f - https://git.kernel.org/stable/c/e6f580d0b3349646d4ee
/git.kernel.org/stable/c/f5dc193167591e88797262ec78515a0cbe79ff5f - https://git.kernel.org/stable/c/e6f580d0b3349646d4ee1ce0057eb273e8fb7e2e - https://git.kernel.org/stable/c/9c25d5ff1856b91bd4365e813f566cb59aaa9552 - https://git.kernel.org/stable/c/3a0a7ec5574b510b067cfc734b8bdb6564b31d4e - https://git.kernel.org/stable/c/be93028d306dac9f5b59ebebd9ec7abcfc69c156 - https://git.kernel.org/stable/c/af0e6c49438b1596e4be8a267d218a0c88a42323 - https://git.kernel.org/stable/c/7f901d53f120d1921f84f7b9b118e87e94b403c5 - https://git.kernel.org/stable/c/bd2db32e7c3e35bd4d9b8bbff689434a50893546
CVE ID: CVE-2022-48627 State: PUBLISHED Published: 2024-03-02T21:31:48.383Z Last Updated: 2025-05-04T08:20:02.253Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: vt: fix memory overlapping when deleting chars in the buffer A memory overlapping copy occurs when deleting a long line. This memory overlapping copy can cause data corruption when scr_memcpyw is optimized to memcpy because memcpy does not ensure its behavior if the destination buffer overlaps with the source buffer. The line buffer is not always broken, because the memcpy utilizes the hardware acceleration, whose result is not deterministic. Fix this problem by using
en, because the memcpy utilizes the hardware acceleration, whose result is not deterministic. Fix this problem by using replacing the scr_memcpyw with scr_memmovew. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/c8686c014b5e872ba7e334f33ca553f14446fc29 - https://git.kernel.org/stable/c/815be99d934e3292906536275f2b8d5131cdf52c - https://git.kernel.org/stable/c/bfee93c9a6c395f9aa62268f1cedf64999844926 - https://git.kernel.org/stable/c/57964a5710252bc82fe22d9fa98c180c58c20244 - https://git.kernel.org/stable/c/14d2cc21ca622310babf373e3a8f0b40acfe8265 - https://git.kernel.org/stable/c/39cdb68c64d84e71a4a717000b6e5de208ee60
able/c/14d2cc21ca622310babf373e3a8f0b40acfe8265 - https://git.kernel.org/stable/c/39cdb68c64d84e71a4a717000b6e5de208ee60cc
CVE ID: CVE-2022-48628 State: PUBLISHED Published: 2024-03-02T21:52:14.626Z Last Updated: 2025-05-04T08:20:03.453Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: ceph: drop messages from MDS when unmounting When unmounting all the dirty buffers will be flushed and after the last osd request is finished the last reference of the i_count will be released. Then it will flush the dirty cap/snap to MDSs, and the unmounting won't wait the possible acks, which will ihold the inodes when updating the metadata locally but makes no sense any more, of this. This will make the evict_inodes() to skip these inodes. If encrypt is enabled the
but makes no sense any more, of this. This will make the evict_inodes() to skip these inodes. If encrypt is enabled the kernel generate a warning when removing the encrypt keys when the skipped inodes still hold the keyring: WARNING: CPU: 4 PID: 168846 at fs/crypto/keyring.c:242 fscrypt_destroy_keyring+0x7e/0xd0 CPU: 4 PID: 168846 Comm: umount Tainted: G S 6.1.0-rc5-ceph-g72ead199864c #1 Hardware name: Supermicro SYS-5018R-WR/X10SRW-F, BIOS 2.0 12/17/2015 RIP: 0010:fscrypt_destroy_keyring+0x7e/0xd0 RSP: 0018:ffffc9000b277e28 EFLAGS: 00010202 RAX: 0000000000000002 RBX: ffff88810d52ac00 RCX: ffff88810b56aa00 RDX: 0000000080000000 RSI: ffffffff822f3a09 RDI: ffff888108f59000 RBP: ffff8881d394fb8
8810d52ac00 RCX: ffff88810b56aa00 RDX: 0000000080000000 RSI: ffffffff822f3a09 RDI: ffff888108f59000 RBP: ffff8881d394fb88 R08: 0000000000000028 R09: 0000000000000000 R10: 0000000000000001 R11: 11ff4fe6834fcd91 R12: ffff8881d394fc40 R13: ffff888108f59000 R14: ffff8881d394f800 R15: 0000000000000000 FS: 00007fd83f6f1080(0000) GS:ffff88885fd00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f918d417000 CR3: 000000017f89a005 CR4: 00000000003706e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: <TASK> generic_shutdown_super+0x47/0x120 kill_anon_super+0x14/0x30
: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: <TASK> generic_shutdown_super+0x47/0x120 kill_anon_super+0x14/0x30 ceph_kill_sb+0x36/0x90 [ceph] deactivate_locked_super+0x29/0x60 cleanup_mnt+0xb8/0x140 task_work_run+0x67/0xb0 exit_to_user_mode_prepare+0x23d/0x240 syscall_exit_to_user_mode+0x25/0x60 do_syscall_64+0x40/0x80 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7fd83dc39e9b Later the kernel will crash when iput() the inodes and dereferencing the "sb->s_master_keys", which has been released by the generic_shutdown_super(). Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/89744b64914426cbabceb3d8a149176b
DP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/89744b64914426cbabceb3d8a149176b5dafdfb5 - https://git.kernel.org/stable/c/47f82395f04a976d4fa97de7f2acffa1c1096571 - https://git.kernel.org/stable/c/e3dfcab2080dc1f9a4b09cc1327361bc2845bfcd