Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2024-53685

ceph: give up on paths longer than PATH_MAX

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: ceph: give up on paths longer than PATH_MAX If the full path to be built by ceph_mdsc_build_path() happens to be longer than PATH_MAX, then this function will enter an endless (retry) loop, effectively blocking the whole task. Most of the machine becomes unusable, making this a very simple and effective DoS vulnerability. I cannot imagine why this retry was ever implemented, but it seems rather useless and harmful to me. Let's remove it and fail with ENAMETOOLONG instead.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 9030aaf9bf0a1eee47a154c316c789e959638b0f to < 0f2b2d9e881c90402dbe28f9ba831775b7992e1faffected
  • 9030aaf9bf0a1eee47a154c316c789e959638b0f to < d42ad3f161a5a487f81915c406f46943c7187a0aaffected
  • 9030aaf9bf0a1eee47a154c316c789e959638b0f to < e4b168c64da06954be5d520f6c16469b1cadc069affected
  • 9030aaf9bf0a1eee47a154c316c789e959638b0f to < c47ed91156daf328601d02b58d52d9804da54108affected
  • 9030aaf9bf0a1eee47a154c316c789e959638b0f to < 99a37ab76a315c8307eb5b0dc095d8ad9d8efeaaaffected
  • 9030aaf9bf0a1eee47a154c316c789e959638b0f to < 550f7ca98ee028a606aa75705a7e77b1bd11720faffected

Linux Linux

Default version status: affected

  • 2.6.34affected
  • 0 to < 2.6.34unaffected
  • 5.10.234 to ≤ 5.10.*unaffected
  • 5.15.177 to ≤ 5.15.*unaffected
  • 6.1.125 to ≤ 6.1.*unaffected
  • 6.6.70 to ≤ 6.6.*unaffected
  • 6.12.7 to ≤ 6.12.*unaffected
  • 6.13 to ≤ *unaffected

References