github - ghsa-52fr-53gv-g23j

ghsa-52fr-53gv-g23j

Vulnerability from github

Published

2025-05-01 15:31

Modified

2025-05-01 15:31

Details

In the Linux kernel, the following vulnerability has been resolved:

fscrypt: fix keyring memory leak on mount failure

Commit d7e7b9af104c ("fscrypt: stop using keyrings subsystem for fscrypt_master_key") moved the keyring destruction from __put_super() to generic_shutdown_super() so that the filesystem's block device(s) are still available. Unfortunately, this causes a memory leak in the case where a mount is attempted with the test_dummy_encryption mount option, but the mount fails after the option has already been processed.

To fix this, attempt the keyring destruction in both places.

Show details on source website

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2022-49897"
  ],
  "database_specific": {
    "cwe_ids": [],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2025-05-01T15:16:14Z",
    "severity": null
  },
  "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nfscrypt: fix keyring memory leak on mount failure\n\nCommit d7e7b9af104c (\"fscrypt: stop using keyrings subsystem for\nfscrypt_master_key\") moved the keyring destruction from __put_super() to\ngeneric_shutdown_super() so that the filesystem\u0027s block device(s) are\nstill available.  Unfortunately, this causes a memory leak in the case\nwhere a mount is attempted with the test_dummy_encryption mount option,\nbut the mount fails after the option has already been processed.\n\nTo fix this, attempt the keyring destruction in both places.",
  "id": "GHSA-52fr-53gv-g23j",
  "modified": "2025-05-01T15:31:52Z",
  "published": "2025-05-01T15:31:52Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-49897"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/0b1747653b102c555bac745ebe5ca86cdd20e43f"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/29997a6fa60de1de2fa0de471e7652efa6e95868"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/ccd30a476f8e864732de220bd50e6f372f5ebcab"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/cff805b1518f38d57866065343db2285f2dcd5ab"
    }
  ],
  "schema_version": "1.4.0",
  "severity": []
}

cve-2022-49897

Vulnerability from cvelistv5

Published

2025-05-01 14:10

Modified

2025-05-04 08:48

Severity ?

Summary

fscrypt: fix keyring memory leak on mount failure

References

▼	URL	Tags
	https://git.kernel.org/stable/c/29997a6fa60de1de2fa0de471e7652efa6e95868
	https://git.kernel.org/stable/c/cff805b1518f38d57866065343db2285f2dcd5ab
	https://git.kernel.org/stable/c/0b1747653b102c555bac745ebe5ca86cdd20e43f
	https://git.kernel.org/stable/c/ccd30a476f8e864732de220bd50e6f372f5ebcab

Impacted products

▼	Vendor	Product
	Linux	Linux
	Linux	Linux

Show details on NVD website

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "fs/crypto/keyring.c",
            "fs/super.c",
            "include/linux/fscrypt.h"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "29997a6fa60de1de2fa0de471e7652efa6e95868",
              "status": "affected",
              "version": "391cceee6d435e616f68631e68f5b32d480b1e67",
              "versionType": "git"
            },
            {
              "lessThan": "cff805b1518f38d57866065343db2285f2dcd5ab",
              "status": "affected",
              "version": "e6f4fd85ef1ee6ab356bfbd64df28c1cb73aee7e",
              "versionType": "git"
            },
            {
              "lessThan": "0b1747653b102c555bac745ebe5ca86cdd20e43f",
              "status": "affected",
              "version": "68d15d6558a386f46d815a6ac39edecad713a1bf",
              "versionType": "git"
            },
            {
              "lessThan": "ccd30a476f8e864732de220bd50e6f372f5ebcab",
              "status": "affected",
              "version": "d7e7b9af104c7b389a0c21eb26532511bce4b510",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "fs/crypto/keyring.c",
            "fs/super.c",
            "include/linux/fscrypt.h"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux"
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nfscrypt: fix keyring memory leak on mount failure\n\nCommit d7e7b9af104c (\"fscrypt: stop using keyrings subsystem for\nfscrypt_master_key\") moved the keyring destruction from __put_super() to\ngeneric_shutdown_super() so that the filesystem\u0027s block device(s) are\nstill available.  Unfortunately, this causes a memory leak in the case\nwhere a mount is attempted with the test_dummy_encryption mount option,\nbut the mount fails after the option has already been processed.\n\nTo fix this, attempt the keyring destruction in both places."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-05-04T08:48:01.912Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/29997a6fa60de1de2fa0de471e7652efa6e95868"
        },
        {
          "url": "https://git.kernel.org/stable/c/cff805b1518f38d57866065343db2285f2dcd5ab"
        },
        {
          "url": "https://git.kernel.org/stable/c/0b1747653b102c555bac745ebe5ca86cdd20e43f"
        },
        {
          "url": "https://git.kernel.org/stable/c/ccd30a476f8e864732de220bd50e6f372f5ebcab"
        }
      ],
      "title": "fscrypt: fix keyring memory leak on mount failure",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2022-49897",
    "datePublished": "2025-05-01T14:10:39.179Z",
    "dateReserved": "2025-05-01T14:05:17.244Z",
    "dateUpdated": "2025-05-04T08:48:01.912Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Log in or create an account to share your comment.

Tags

Taxonomy of the tags.

All sightings related to this event Export sightings related to this event

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.