PT-2025-18614 · Linux · Linux Kernel

Published 2025-05-01 · Updated 2025-05-02 · CVE-2022-49897

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A memory leak issue has been identified in the Linux kernel related to the fscrypt feature. Specifically, when a mount attempt fails after the test dummy encryption option has been processed, a memory leak occurs due to the improper destruction of the keyring. This issue arose from a commit that moved the keyring destruction from put super() to generic shutdown super() to keep the filesystem's block device available. The problem is resolved by attempting keyring destruction in both locations.

Recommendations To resolve this issue, apply the fix that attempts the keyring destruction in both put super() and generic shutdown super(). At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2022-49897

Affected Products

Linux Kernel

References · 12

• https://osv.dev/vulnerability/CVE-2022-49897 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-49897 · Security Note
• https://ubuntu.com/security/CVE-2022-49897 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2022-49897 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-49897 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-49897 · Vendor Advisory
• https://git.kernel.org/stable/c/29997a6fa60de1de2fa0de471e7652efa6e95868 · Note
• https://git.kernel.org/linus/ccd30a476f8e864732de220bd50e6f372f5ebcab · Note
• https://git.kernel.org/stable/c/cff805b1518f38d57866065343db2285f2dcd5ab · Note
• https://twitter.com/CVEnew/status/1917950822144709079 · Twitter Post
• https://git.kernel.org/stable/c/ccd30a476f8e864732de220bd50e6f372f5ebcab · Note
• https://git.kernel.org/stable/c/0b1747653b102c555bac745ebe5ca86cdd20e43f · Note