PT-2025-8037 · Linux+4 · Linux Kernel+4

Xiubo Li · Published 2022-01-01 · Updated 2026-03-14 · CVE-2022-49109

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A vulnerability in the Linux kernel has been identified, related to the ceph get snapdir() function. The issue involves an inode reference leakage, which occurs when the ceph get inode() function searches for or inserts a new inode into the hash for a given vino and returns a reference to it. In error handling cases, the reference is not released, leading to a potential issue.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

ALSA-2025_16880

CVE-2022-49109

RHSA-2022:8267

RHSA-2022_8267

SUSE-SU-2025:1027-1

SUSE-SU-2025:1176-1

SUSE-SU-2025:1183-1

SUSE-SU-2025:1241-1

SUSE-SU-2025:1293-1

SUSE-SU-2025_1027-1

SUSE-SU-2025_1241-1

SUSE-SU-2025_1293-1

Affected Products

Astra Linux

Debian

Linux Kernel

Red Hat

Suse

References · 1480

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49109.json · Exploit
• https://git.kernel.org/stable/c/3ae7163598c611a8892698e0c056fe794e52b44b · Patch
• https://security-tracker.debian.org/tracker/CVE-2022-49109 · Vendor Advisory
• https://git.kernel.org/stable/c/9cd21981dedfb4fe9f344529e4be35727cb10940 · Patch
• https://osv.dev/vulnerability/ROOT-OS-DEBIAN-11-CVE-2022-49109 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:1183-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:1293-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:1176-1 · Vendor Advisory
• https://git.kernel.org/stable/c/322794d3355c33adcc4feace0045d85a8e4ed813 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2022-49109 · Security Note
• https://ubuntu.com/security/CVE-2022-49109 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-49109 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-49109 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:1241-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:1027-1 · Vendor Advisory