ceph: blocklist the kclient when receiving corrupted snap trace (Linux Linux)
At a glance
- Source
- NVD
- EPSS
- EPSS 0.53 % · percentile 45 ()
- State
- PUBLISHED
- Published
- Updated
- Assigner
- Linux
- NVD status
- Modified
Description
In the Linux kernel, the following vulnerability has been resolved: ceph: blocklist the kclient when receiving corrupted snap trace When received corrupted snap trace we don't know what exactly has happened in MDS side. And we shouldn't continue IOs and metadatas access to MDS, which may corrupt or get incorrect contents. This patch will just block all the further IO/MDS requests immediately and then evict the kclient itself. The reason why we still need to evict the kclient just after blocking all the further IOs is that the MDS could revoke the caps faster.
References
Scores
| Version | Score | Vector | Scored by |
|---|---|---|---|
| CVSS 3.1 | CRITICAL 9.8 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H | Linux |
| CVSS 3.1 | CRITICAL 9.8 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H | NVD · 416baaa9-dc9f-4396-8d5f-8c081fb06d67 (Secondary) |
| CVSS 3.1 | MEDIUM 5.5 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H | NVD · nvd@nist.gov (Primary) |
European references
- ENISA EUVD · EUVD-2023-59451
- GCVE · GCVE-0-2023-52732
CERT-FR advisories
- CERTFR-2026-AVI-0326 — Multiples vulnérabilités dans les produits VMware · cert.ssi.gouv.fr
- CERTFR-2026-AVI-0316 — Multiples vulnérabilités dans les produits VMware · cert.ssi.gouv.fr
- CERTFR-2024-AVI-0526 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2024-AVI-0496 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
Affected configurations (NVD CPE)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 2.6.35 < 6.1.13cpe:2.3:o:linux:linux_kernel:2.6.34:-:*:*:*:*:*:*cpe:2.3:o:linux:linux_kernel:2.6.34:rc2:*:*:*:*:*:*cpe:2.3:o:linux:linux_kernel:2.6.34:rc3:*:*:*:*:*:*cpe:2.3:o:linux:linux_kernel:2.6.34:rc4:*:*:*:*:*:*cpe:2.3:o:linux:linux_kernel:2.6.34:rc5:*:*:*:*:*:*cpe:2.3:o:linux:linux_kernel:2.6.34:rc6:*:*:*:*:*:*cpe:2.3:o:linux:linux_kernel:2.6.34:rc7:*:*:*:*:*:*cpe:2.3:o:linux:linux_kernel:6.2:rc1:*:*:*:*:*:*cpe:2.3:o:linux:linux_kernel:6.2:rc2:*:*:*:*:*:*cpe:2.3:o:linux:linux_kernel:6.2:rc3:*:*:*:*:*:*cpe:2.3:o:linux:linux_kernel:6.2:rc4:*:*:*:*:*:*cpe:2.3:o:linux:linux_kernel:6.2:rc5:*:*:*:*:*:*cpe:2.3:o:linux:linux_kernel:6.2:rc6:*:*:*:*:*:*
Affected products
| Product | Versions |
|---|---|
| Linux · Linux | affected 9030aaf9bf0a1eee47a154c316c789e959638b0f < 66ec619e4591f8350f99c5269a7ce160cccc7a7c ; affected 9030aaf9bf0a1eee47a154c316c789e959638b0f < a68e564adcaa69b0930809fb64d9d5f7d9c32ba9 |
| Linux · Linux | affected 2.6.34 ; unaffected 0 < 2.6.34 ; unaffected 6.1.13 ≤ 6.1.* ; unaffected 6.2 ≤ * |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| CERT-FR (ANSSI) | Licence Ouverte / Etalab 2.0 |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |