Vulnerability in ceph: Fix Inode Leak on Getattr Error in __fh_to_dentry
Summary
GSD-2021-1000216: ceph: fix inode leak on getattr error in __fh_to_dentry. Affects Kernel versions >= 878dabb64117406abd40977b87544d05bb3031fc, < 0a219432127d396120fc88cabd82785e0ff72a2f. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Ceph is a distributed storage system designed to provide excellent performance, reliability, and scalability. It is commonly used in cloud computing environments to store and manage large amounts of data. The vulnerability in ceph affects the Linux Kernel, which is the core component of the Linux operating system. The Linux Kernel is responsible for managing system resources and providing an interface for applications to interact with the underlying hardware. This vulnerability specifically impacts the __fh_to_dentry function in ceph, which is used to convert a file handle to a directory entry. When an error occurs during the getattr operation, an inode leak can occur, leading to potential resource exhaustion and instability of the system.
Vulnerability Detail
The vulnerability arises from a flaw in the __fh_to_dentry function in ceph. When an error occurs during the getattr operation, the function fails to properly release the inode, resulting in an inode leak. This can lead to resource exhaustion and instability of the system. An attacker could potentially exploit this vulnerability to cause a denial of service by repeatedly triggering the getattr operation and exhausting system resources. The vulnerability was introduced in Linux Kernel version v5.8 and has been fixed in version v5.12.5 by commit 0a219432127d396120fc88cabd82785e0ff72a2f.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no known workaround for this vulnerability. It is recommended to apply the fix mentioned above as soon as possible.
Conclusion
The vulnerability in ceph that causes an inode leak on getattr error in __fh_to_dentry can lead to resource exhaustion and system instability. It is crucial to update the Linux Kernel to version v5.12.5 or later to mitigate this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
Ceph is a distributed storage system designed to provide excellent performance, reliability, and scalability. It is commonly used in cloud computing environments to store and manage large amounts of data.
The Linux Kernel is the core component of the Linux operating system. It is responsible for managing system resources and providing an interface for applications to interact with the underlying hardware.
The __fh_to_dentry function in ceph is used to convert a file handle to a directory entry. It is a critical part of the file system operations in ceph.
This vulnerability can lead to resource exhaustion and instability of the system. An attacker could potentially exploit it to cause a denial of service by exhausting system resources.
To fix this vulnerability, it is recommended to update the Linux Kernel to version v5.12.5 or later. Instructions for updating the kernel can be found in the official Linux Kernel documentation.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
