CVE-2022-48699: 
Linux Kernel vulnerability analysis and mitigation

CVE-2022-48699 affects the Linux kernel's scheduler debugging functionality. The vulnerability was discovered and reported by Kuyo Chang, and was disclosed on May 3, 2024. The issue involves a dentry leak in the update_sched_domain_debugfs function, which occurs when using the pattern debugfs_remove(debugfs_lookup()) (Kernel Git).

The vulnerability stems from improper reference counting logic in the kernel's scheduler debugging code. Specifically, the pattern of using debugfs_remove(debugfs_lookup()) in the update_sched_domain_debugfs function leads to a dentry leak. When combined with hotplug stress testing, this leak can accumulate and eventually cause the machine to run out of memory (Kernel Git).

The primary impact of this vulnerability is resource exhaustion leading to system instability. Under stress conditions, particularly during hotplug operations, the dentry leak can cause the system to gradually consume memory until it runs out of available resources (Kernel Git).

The vulnerability can be triggered through hotplug stress testing operations that interact with the scheduler debugging functionality. The issue has been confirmed and tested by the original reporter, Kuyo Chang (Kernel Git).

The issue has been fixed by replacing the problematic debugfs_remove(debugfs_lookup()) pattern with the newly created debugfs_lookup_and_remove() function call, which properly handles the dentry reference counting logic. This fix has been implemented and merged into the Linux kernel (Kernel Git).