Memory Leak in ceph_readdir in Kernel
Summary
GSD-2022-1001038: ceph: fix memory leak in ceph_readdir when note_last_dentry returns error. Affects Kernel versions < 7f740ede35132d3d5d19747cad56a511d21bb156. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Kernel is a critical component of the Linux operating system that provides core functionality and interfaces with hardware devices. It manages system resources, such as memory and processes, and facilitates communication between software and hardware. The ceph_readdir function is part of the Ceph file system implementation in the Kernel. It is responsible for reading directory entries from a Ceph file system. This vulnerability in ceph_readdir can lead to a memory leak when the note_last_dentry function returns an error.
Vulnerability Detail
The vulnerability in ceph_readdir occurs when the note_last_dentry function encounters an error. This can happen due to various reasons, such as invalid directory entries or file system corruption. When note_last_dentry fails, it does not properly release the allocated memory, resulting in a memory leak. A memory leak can gradually consume available memory resources, leading to performance degradation and potential system instability. An attacker may be able to exploit this vulnerability to exhaust system memory and cause a denial-of-service condition.
How To Fix
No fixed version is published for this vulnerability.
To fix this vulnerability, it is recommended to update the Linux Kernel to version v5.17.3 or later. This fix is available in commit 7f740ede35132d3d5d19747cad56a511d21bb156. Updating the Kernel ensures that the memory leak issue in ceph_readdir is resolved.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
If updating the Kernel is not immediately feasible, a temporary workaround can be implemented by avoiding operations that trigger the ceph_readdir function. This can involve restricting access to directories or using alternative file system operations that do not rely on ceph_readdir. However, applying the official fix by updating the Kernel is the recommended approach.
Conclusion
In conclusion, the vulnerability in ceph_readdir can result in a memory leak in the Kernel, potentially leading to performance degradation and system instability. It is crucial to update the Linux Kernel to version v5.17.3 or later to mitigate this vulnerability. If immediate updating is not possible, implementing a temporary workaround can help avoid triggering the vulnerable function. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
This vulnerability can lead to a memory leak in the Kernel's ceph_readdir function. It can gradually consume system memory, resulting in performance degradation and potential system instability.
An attacker may be able to exploit this vulnerability to exhaust system memory and cause a denial-of-service condition.
The vulnerability is present in versions of the Linux Kernel prior to v5.17.3.
A temporary workaround involves avoiding operations that trigger the ceph_readdir function. However, updating the Kernel to the fixed version is the recommended solution.
More details about the fix can be found in the commit 7f740ede35132d3d5d19747cad56a511d21bb156 in the Linux Kernel repository.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
Follow Vulert in Google
Get more Vulert vulnerability and dependency-security updates in Google Search and AI results.