Cred Leak Vulnerability in Linux Kernel: Impacting Debian Packages
Summary
DEBIAN-CVE-2024-56563: In the Linux kernel, the following vulnerability has been resolved: ceph: fix cred leak in ceph_mds_check_access() get_current_cred() increments the reference counter, but the put_cred() call was missing. Affects linux versions < 6.12.5-1. Fixed in 6.12.5-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
The Linux kernel is the core component of the Linux operating system, responsible for managing system resources and facilitating communication between hardware and software. It is widely used across various distributions, including Debian 13 and 14. The kernel's functionality includes process management, memory management, device drivers, and system calls. This vulnerability specifically affects the Ceph file system within the kernel, which is designed for distributed storage solutions, highlighting the importance of maintaining security in critical system components.
Vulnerability Detail
In the Linux kernel, a vulnerability has been identified in the Ceph file system related to the function ceph_mds_check_access(). The issue arises from a missing put_cred() call, which leads to a credential leak. The get_current_cred() function increments the reference counter for the current credentials, but without the corresponding put_cred() to decrement it, this can result in memory leaks and potential denial of service. This vulnerability could be exploited by an attacker to gain unauthorized access or disrupt the normal operation of the system.
How To Fix
Minimum fixed version
6.12.5-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds mentioned for this vulnerability. The best course of action is to apply the patch as soon as it is available.
Conclusion
The identified vulnerability in the Linux kernel's Ceph file system poses significant risks, including credential leaks and potential unauthorized access. Users are strongly advised to update their kernel packages to the latest patched version to ensure system security and integrity.
See every vulnerability recorded for linux →
FAQ
The vulnerability is a credential leak in the Ceph file system of the Linux kernel, which can lead to unauthorized access and memory leaks.
You can use Vulert to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected by this vulnerability.
If exploited, this vulnerability could allow attackers to gain unauthorized access to system resources or disrupt normal operations, potentially leading to a denial of service.
Yes, a patch is available in the form of the Linux kernel version 6.12.5-1 for both Debian 13 and 14.
While there are no specific workarounds, it is crucial to prioritize updating your kernel to mitigate the risk associated with this vulnerability.
References
Related vulnerabilities
Recent vulnerabilities recorded for linux.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
