CVE-2022-48628

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

ceph: drop messages from MDS when unmounting

When unmounting all the dirty buffers will be flushed and after

the last osd request is finished the last reference of the i_count

will be released. Then it will flush the dirty cap/snap to MDSs,

and the unmounting won't wait the possible acks, which will ihold

the inodes when updating the metadata locally but makes no sense

any more, of this. This will make the evict_inodes() to skip these

inodes.

If encrypt is enabled the kernel generate a warning when removing

the encrypt keys when the skipped inodes still hold the keyring:

WARNING: CPU: 4 PID: 168846 at fs/crypto/keyring.c:242 fscrypt_destroy_keyring+0x7e/0xd0

CPU: 4 PID: 168846 Comm: umount Tainted: G S 6.1.0-rc5-ceph-g72ead199864c #1

Hardware name: Supermicro SYS-5018R-WR/X10SRW-F, BIOS 2.0 12/17/2015

RIP: 0010:fscrypt_destroy_keyring+0x7e/0xd0

RSP: 0018:ffffc9000b277e28 EFLAGS: 00010202

RAX: 0000000000000002 RBX:

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References