Every CVE Search/ Get API key

CVE-2022-48340

In Gluster GlusterFS 11.0, there is an xlators/cluster/dht/src/dht-common.c dht_setxattr_mds_cbk...

7.5 HighFix available

In Gluster GlusterFS 11.0, there is an xlators/cluster/dht/src/dht-common.c dht_setxattr_mds_cbk use-after-free.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
High

Exploit likelihood

0.87%Unchanged since Feb 21, 2023
90%50%10%1%

What each source reports

NVD Score used 7.5

In Gluster GlusterFS 11.0, there is an xlators/cluster/dht/src/dht-common.c dht_setxattr_mds_cbk use-after-free.

Record
CVE-2022-48340
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-416
Updated
2026-11-02
CVE List 7.5

In Gluster GlusterFS 11.0, there is an xlators/cluster/dht/src/dht-common.c dht_setxattr_mds_cbk use-after-free.

Record
CVE-2022-48340
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-416
Updated
2026-11-02
EUVDEUVD-2022-51040 7.5

In Gluster GlusterFS 11.0, there is an xlators/cluster/dht/src/dht-common.c dht_setxattr_mds_cbk use-after-free.

Record
EUVD-2022-51040
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
GitHub AdvisoriesGHSA-wqf4-gccr-fcx6 7.5

In Gluster GlusterFS 11.0, there is an xlators/cluster/dht/src/dht-common.c dht_setxattr_mds_cbk...

In Gluster GlusterFS 11.0, there is an xlators/cluster/dht/src/dht-common.c dht_setxattr_mds_cbk use-after-free.

Record
GHSA-wqf4-gccr-fcx6
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-416
Updated
2026-11-02
OSV 7.5

In Gluster GlusterFS 11.0, there is an xlators/cluster/dht/src/dht-common.c dht_setxattr_mds_cbk use-after-free.

Record
CVE-2022-48340
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVDEBIAN-CVE-2022-48340 7.5

In Gluster GlusterFS 11.0, there is an xlators/cluster/dht/src/dht-common.c dht_setxattr_mds_cbk use-after-free.

Record
DEBIAN-CVE-2022-48340
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-03
Show 11 moreShow less
OSVOESA-2024-1265 7.5

glusterfs security update

GlusterFS is a distributed file-system capable of scaling to several petabytes. It aggregates various storage bricks over TCP/IP interconnect into one large parallel network filesystem. GlusterFS is one of the most sophisticated file systems in terms of features and extensibility. It borrows a powerful concept called Translators from GNU Hurd kernel. Much of the code in GlusterFS is in user space and easily manageable.

Security Fix(es):

In Gluster GlusterFS 11.0, there is an xlators/cluster/dht/src/dht-common.c dht_setxattr_mds_cbk use-after-free.(CVE-2022-48340)

Record
OESA-2024-1265
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVOESA-2024-1266 7.5

glusterfs security update

GlusterFS is a distributed file-system capable of scaling to several petabytes. It aggregates various storage bricks over TCP/IP interconnect into one large parallel network filesystem. GlusterFS is one of the most sophisticated file systems in terms of features and extensibility. It borrows a powerful concept called Translators from GNU Hurd kernel. Much of the code in GlusterFS is in user space and easily manageable.

Security Fix(es):

In Gluster GlusterFS 11.0, there is an xlators/cluster/dht/src/dht-common.c dht_setxattr_mds_cbk use-after-free.(CVE-2022-48340)

Record
OESA-2024-1266
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVOESA-2024-1267 7.5

glusterfs security update

GlusterFS is a distributed file-system capable of scaling to several petabytes. It aggregates various storage bricks over TCP/IP interconnect into one large parallel network filesystem. GlusterFS is one of the most sophisticated file systems in terms of features and extensibility. It borrows a powerful concept called Translators from GNU Hurd kernel. Much of the code in GlusterFS is in user space and easily manageable.

Security Fix(es):

In Gluster GlusterFS 11.0, there is an xlators/cluster/dht/src/dht-common.c dht_setxattr_mds_cbk use-after-free.(CVE-2022-48340)

Record
OESA-2024-1267
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVOESA-2024-1268 7.5

glusterfs security update

GlusterFS is a distributed file-system capable of scaling to several petabytes. It aggregates various storage bricks over TCP/IP interconnect into one large parallel network filesystem. GlusterFS is one of the most sophisticated file systems in terms of features and extensibility. It borrows a powerful concept called Translators from GNU Hurd kernel. Much of the code in GlusterFS is in user space and easily manageable.

Security Fix(es):

In Gluster GlusterFS 11.0, there is an xlators/cluster/dht/src/dht-common.c dht_setxattr_mds_cbk use-after-free.(CVE-2022-48340)

Record
OESA-2024-1268
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVOESA-2024-1269 7.5

glusterfs security update

GlusterFS is a distributed file-system capable of scaling to several petabytes. It aggregates various storage bricks over TCP/IP interconnect into one large parallel network filesystem. GlusterFS is one of the most sophisticated file systems in terms of features and extensibility. It borrows a powerful concept called Translators from GNU Hurd kernel. Much of the code in GlusterFS is in user space and easily manageable.

Security Fix(es):

In Gluster GlusterFS 11.0, there is an xlators/cluster/dht/src/dht-common.c dht_setxattr_mds_cbk use-after-free.(CVE-2022-48340)

Record
OESA-2024-1269
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2022-48340 7.5

In Gluster GlusterFS 11.0, there is an xlators/cluster/dht/src/dht-common.c dht_setxattr_mds_cbk use-after-free.

Record
UBUNTU-CVE-2022-48340
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVCLSA-2026-1781080101 No score

glusterfs: Fix of CVE-2022-48340

  • CVE-2022-48340: fix use-after-free in dht_setxattr_mds_cbk when a non-mds subvol is down
Record
CLSA-2026-1781080101
Updated
2026-11-02
OSVCLSA-2026-1781177494 No score

glusterfs: Fix of CVE-2022-48340

  • CVE-2022-48340: fix use-after-free in dht_setxattr_mds_cbk
Record
CLSA-2026-1781177494
Updated
2026-11-02
OSVCLSA-2026-1782151075 No score

glusterfs: Fix of CVE-2022-48340

  • bumping version to 6.0-56.4
Record
CLSA-2026-1782151075
Updated
2026-11-02
OSVCLSA-2026-1782151296 No score

glusterfs: Fix of CVE-2022-48340

  • bumping version to 6.0-56.4
Record
CLSA-2026-1782151296
Updated
2026-11-02
OSVUSN-6507-1 No score

glusterfs vulnerability

It was discovered that GlusterFS incorrectly handled certain memory operations. A remote attacker could possibly use this issue to cause GlusterFS to crash, resulting in a denial of service.

Record
USN-6507-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
glusterfs
TuxCare:CentOS:8.4
 before 6.0-49.1.el8.tuxcare.els1
6.0-49.1.el8.tuxcare.els1
glusterfs-api
TuxCare:CentOS:8.4
 before 6.0-49.1.el8.tuxcare.els1
6.0-49.1.el8.tuxcare.els1
glusterfs-api-devel
TuxCare:CentOS:8.4
 before 6.0-49.1.el8.tuxcare.els1
6.0-49.1.el8.tuxcare.els1
glusterfs-cli
TuxCare:CentOS:8.4
 before 6.0-49.1.el8.tuxcare.els1
6.0-49.1.el8.tuxcare.els1
glusterfs-client-xlators
TuxCare:CentOS:8.4
 before 6.0-49.1.el8.tuxcare.els1
6.0-49.1.el8.tuxcare.els1
glusterfs-cloudsync-plugins
TuxCare:CentOS:8.4
 before 6.0-49.1.el8.tuxcare.els1
6.0-49.1.el8.tuxcare.els1
glusterfs-devel
TuxCare:CentOS:8.4
 before 6.0-49.1.el8.tuxcare.els1
6.0-49.1.el8.tuxcare.els1
glusterfs-fuse
TuxCare:CentOS:8.4
 before 6.0-49.1.el8.tuxcare.els1
6.0-49.1.el8.tuxcare.els1
glusterfs-libs
TuxCare:CentOS:8.4
 before 6.0-49.1.el8.tuxcare.els1
6.0-49.1.el8.tuxcare.els1
glusterfs-rdma
TuxCare:CentOS:8.4
 before 6.0-49.1.el8.tuxcare.els1
6.0-49.1.el8.tuxcare.els1
Show 45 moreShow less
Affected packages
PackageAffectedFixed
python3-gluster
TuxCare:CentOS:8.4
 before 6.0-49.1.el8.tuxcare.els1
6.0-49.1.el8.tuxcare.els1
glusterfs
TuxCare:AlmaLinux:9.2
 before 6.0-57.4.el9.tuxcare.els1
6.0-57.4.el9.tuxcare.els1
glusterfs-api
TuxCare:AlmaLinux:9.2
 before 6.0-57.4.el9.tuxcare.els1
6.0-57.4.el9.tuxcare.els1
glusterfs-api-devel
TuxCare:AlmaLinux:9.2
 before 6.0-57.4.el9.tuxcare.els1
6.0-57.4.el9.tuxcare.els1
glusterfs-cli
TuxCare:AlmaLinux:9.2
 before 6.0-57.4.el9.tuxcare.els1
6.0-57.4.el9.tuxcare.els1
glusterfs-client-xlators
TuxCare:AlmaLinux:9.2
 before 6.0-57.4.el9.tuxcare.els1
6.0-57.4.el9.tuxcare.els1
glusterfs-cloudsync-plugins
TuxCare:AlmaLinux:9.2
 before 6.0-57.4.el9.tuxcare.els1
6.0-57.4.el9.tuxcare.els1
glusterfs-devel
TuxCare:AlmaLinux:9.2
 before 6.0-57.4.el9.tuxcare.els1
6.0-57.4.el9.tuxcare.els1
glusterfs-fuse
TuxCare:AlmaLinux:9.2
 before 6.0-57.4.el9.tuxcare.els1
6.0-57.4.el9.tuxcare.els1
glusterfs-libs
TuxCare:AlmaLinux:9.2
 before 6.0-57.4.el9.tuxcare.els1
6.0-57.4.el9.tuxcare.els1
glusterfs-rdma
TuxCare:AlmaLinux:9.2
 before 6.0-57.4.el9.tuxcare.els1
6.0-57.4.el9.tuxcare.els1
python3-gluster
TuxCare:AlmaLinux:9.2
 before 6.0-57.4.el9.tuxcare.els1
6.0-57.4.el9.tuxcare.els1
glusterfs
TuxCare:CentOS:8.5
 before 6.0-56.4.el8.tuxcare.els1
6.0-56.4.el8.tuxcare.els1
glusterfs-api
TuxCare:CentOS:8.5
 before 6.0-56.4.el8.tuxcare.els1
6.0-56.4.el8.tuxcare.els1
glusterfs-api-devel
TuxCare:CentOS:8.5
 before 6.0-56.4.el8.tuxcare.els1
6.0-56.4.el8.tuxcare.els1
glusterfs-cli
TuxCare:CentOS:8.5
 before 6.0-56.4.el8.tuxcare.els1
6.0-56.4.el8.tuxcare.els1
glusterfs-client-xlators
TuxCare:CentOS:8.5
 before 6.0-56.4.el8.tuxcare.els1
6.0-56.4.el8.tuxcare.els1
glusterfs-cloudsync-plugins
TuxCare:CentOS:8.5
 before 6.0-56.4.el8.tuxcare.els1
6.0-56.4.el8.tuxcare.els1
glusterfs-devel
TuxCare:CentOS:8.5
 before 6.0-56.4.el8.tuxcare.els1
6.0-56.4.el8.tuxcare.els1
glusterfs-fuse
TuxCare:CentOS:8.5
 before 6.0-56.4.el8.tuxcare.els1
6.0-56.4.el8.tuxcare.els1
glusterfs-libs
TuxCare:CentOS:8.5
 before 6.0-56.4.el8.tuxcare.els1
6.0-56.4.el8.tuxcare.els1
glusterfs-rdma
TuxCare:CentOS:8.5
 before 6.0-56.4.el8.tuxcare.els1
6.0-56.4.el8.tuxcare.els1
python3-gluster
TuxCare:CentOS:8.5
 before 6.0-56.4.el8.tuxcare.els1
6.0-56.4.el8.tuxcare.els1
glusterfs
TuxCare:CentOS-Stream:8
 before 6.0-56.4.el8.tuxcare.els1
6.0-56.4.el8.tuxcare.els1
glusterfs-api
TuxCare:CentOS-Stream:8
 before 6.0-56.4.el8.tuxcare.els1
6.0-56.4.el8.tuxcare.els1
glusterfs-api-devel
TuxCare:CentOS-Stream:8
 before 6.0-56.4.el8.tuxcare.els1
6.0-56.4.el8.tuxcare.els1
glusterfs-cli
TuxCare:CentOS-Stream:8
 before 6.0-56.4.el8.tuxcare.els1
6.0-56.4.el8.tuxcare.els1
glusterfs-client-xlators
TuxCare:CentOS-Stream:8
 before 6.0-56.4.el8.tuxcare.els1
6.0-56.4.el8.tuxcare.els1
glusterfs-cloudsync-plugins
TuxCare:CentOS-Stream:8
 before 6.0-56.4.el8.tuxcare.els1
6.0-56.4.el8.tuxcare.els1
glusterfs-devel
TuxCare:CentOS-Stream:8
 before 6.0-56.4.el8.tuxcare.els1
6.0-56.4.el8.tuxcare.els1
glusterfs-fuse
TuxCare:CentOS-Stream:8
 before 6.0-56.4.el8.tuxcare.els1
6.0-56.4.el8.tuxcare.els1
glusterfs-libs
TuxCare:CentOS-Stream:8
 before 6.0-56.4.el8.tuxcare.els1
6.0-56.4.el8.tuxcare.els1
glusterfs-rdma
TuxCare:CentOS-Stream:8
 before 6.0-56.4.el8.tuxcare.els1
6.0-56.4.el8.tuxcare.els1
python3-gluster
TuxCare:CentOS-Stream:8
 before 6.0-56.4.el8.tuxcare.els1
6.0-56.4.el8.tuxcare.els1
glusterfs
Debian:12
 All versions, plus listed versions
10.3-510.4-111.0-111.0-211.0-3
Show 12 moreShow less
11.1-111.1-211.1-311.1-3~bpo12+111.1-411.1-511.1-611.2-111.2-211.2-311.2-411.2-5
 None known
glusterfs
Debian:13
 before 11.1-1
11.1-1
glusterfs
Debian:14
 before 11.1-1
11.1-1
glusterfs
openEuler:20.03-LTS-SP1
 before 7.0-12.oe1
7.0-12.oe1
glusterfs
openEuler:22.03-LTS
 before 10.0-9.oe2203
10.0-9.oe2203
glusterfs
openEuler:22.03-LTS-SP1
 before 10.0-9.oe2203sp1
10.0-9.oe2203sp1
glusterfs
openEuler:22.03-LTS-SP2
 before 10.0-9.oe2203sp2
10.0-9.oe2203sp2
glusterfs
openEuler:22.03-LTS-SP3
 before 10.0-9.oe2203sp3
10.0-9.oe2203sp3
glusterfs
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
3.11.2-13.12.1-13.12.2-13.12.2-23.12.3-1
Show 5 moreShow less
3.13.0-13.13.2-13.13.2-1build13.13.2-1ubuntu13.13.2-1ubuntu1+esm1
 None known
glusterfs
Ubuntu:20.04:LTS
 All versions, plus listed versions
6.5-17.0-17.0-27.1-17.2-17.2-27.2-2build1
 None known
glusterfs
Ubuntu:22.04:LTS
 before 10.1-1ubuntu0.2, plus listed versions
9.2-110.0-1.2ubuntu110.0-1.2ubuntu210.0-210.1-110.1-1ubuntu0.1
10.1-1ubuntu0.2

History

History
RecordedChangedSources
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2022-48340 is a high vulnerability (CVSS 7.5) in Gluster Glusterfs, published February 21, 2023. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.87%, the 59th percentile. Fixed in glusterfs 6.0-49.1.el8.tuxcare.els1.

References

Show 14 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open