Описание
In the Linux kernel, the following vulnerability has been resolved:
ceph: fix cred leak in ceph_mds_check_access()
get_current_cred() increments the reference counter, but the
put_cred() call was missing.
A flaw was found in the Linux kernel's Ceph file system client. This flaw allows a local user to cause a Denial of Service (DoS) through memory exhaustion. The issue occurs because the kernel fails to release credential reference counts after performing access checks in the ceph_mds_check_access() function. By repeatedly triggering these access checks, a local attacker can leak kernel memory over time, potentially leading to system instability or a crash.
Отчет
This vulnerability is rated as Low impact for Red Hat Enterprise Linux because exploitation requires local system access to an active Ceph file system mount and causes a gradual resource leak rather than immediate system failure or privilege escalation. CephFS is not mounted or utilized by default in standard installations, restricting the attack surface solely to deployments explicitly utilizing the kernel Ceph client. Furthermore, earlier stable releases of Red Hat Enterprise Linux do not contain the affected code introduced in newer upstream kernels, limiting overall exposure across the product portfolio.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux 10 | kernel | Fix deferred | ||
| Red Hat Enterprise Linux 6 | kernel | Not affected | ||
| Red Hat Enterprise Linux 7 | kernel | Not affected | ||
| Red Hat Enterprise Linux 7 | kernel-rt | Not affected | ||
| Red Hat Enterprise Linux 8 | kernel | Not affected | ||
| Red Hat Enterprise Linux 8 | kernel-rt | Not affected | ||
| Red Hat Enterprise Linux 9 | kernel | Not affected | ||
| Red Hat Enterprise Linux 9 | kernel-rt | Not affected |
Показывать по
Дополнительная информация
Статус:
EPSS
3.3 Low
CVSS3
Связанные уязвимости
In the Linux kernel, the following vulnerability has been resolved: ceph: fix cred leak in ceph_mds_check_access() get_current_cred() increments the reference counter, but the put_cred() call was missing.
In the Linux kernel, the following vulnerability has been resolved: ceph: fix cred leak in ceph_mds_check_access() get_current_cred() increments the reference counter, but the put_cred() call was missing.
In the Linux kernel, the following vulnerability has been resolved: c ...
In the Linux kernel, the following vulnerability has been resolved: ceph: fix cred leak in ceph_mds_check_access() get_current_cred() increments the reference counter, but the put_cred() call was missing.
Уязвимость функции ceph_mds_check_access() модуля fs/ceph/mds_client.c поддержки распределенной файловой системы Ceph ядра операционной системы Linux, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации
EPSS
3.3 Low
CVSS3