Vulnerability in ceph: Fix Inode Reference Leakage in ceph_get_snapdir()
Summary
GSD-2022-1001708: ceph: fix inode reference leakage in ceph_get_snapdir(). Affects Kernel versions < 3ae7163598c611a8892698e0c056fe794e52b44b. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Ceph is a distributed storage system that provides object, block, and file storage. It is widely used in cloud computing and data centers. The ceph_get_snapdir() function is responsible for retrieving the snapshot directory inode in the Ceph file system. However, a vulnerability has been discovered in this function that leads to inode reference leakage. This vulnerability could potentially allow an attacker to exhaust system resources and cause a denial of service (DoS) condition.
Vulnerability Detail
The vulnerability in ceph_get_snapdir() arises from a failure to properly release inode references. When the function is called, it retrieves the snapshot directory inode and increments its reference count. However, if an error occurs during the retrieval process, the function fails to release the reference, resulting in a reference leakage. This can be exploited by an attacker to exhaust system resources by repeatedly triggering the error condition. The impact of this vulnerability can range from a temporary system slowdown to a complete system crash, depending on the severity of the resource exhaustion.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As this vulnerability has been fixed in the Linux Kernel, there is no specific workaround available. However, users can apply the fix by updating their Linux Kernel to version v5.15.34 or later.
Conclusion
The vulnerability in ceph_get_snapdir() has been addressed in the Linux Kernel version v5.15.34. It is recommended to update the Linux Kernel to this version or later to mitigate the vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
Ceph is a distributed storage system that provides object, block, and file storage. It is widely used in cloud computing and data centers.
ceph_get_snapdir() is a function in the Ceph file system that retrieves the snapshot directory inode.
The vulnerability can lead to resource exhaustion and cause a denial of service (DoS) condition. It can result in system slowdown or even a complete system crash.
The vulnerability has been fixed in Linux Kernel version v5.15.34. Update your Linux Kernel to this version or later to mitigate the vulnerability.
There is no specific workaround available as the vulnerability has been fixed in the Linux Kernel. Update your Linux Kernel to the fixed version.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
