CVE-2024-53685: ceph: give up on paths longer than PATH_MAX
In the Linux kernel, the following vulnerability has been resolved:
ceph: give up on paths longer than PATHMAX
If the full path to be built by cephmdscbuildpath() happens to be longer than PATHMAX, then this function will enter an endless (retry) loop, effectively blocking the whole task. Most of the machine becomes unusable, making this a very simple and effective DoS vulnerability.
I cannot imagine why this retry was ever implemented, but it seems rather useless and harmful to me. Let's remove it and fail with ENAMETOOLONG instead.
Other sources
This CVE was automatically created from a reference found in an email or other text. If you are reading this, then this CVE entry is probably erroneous, since this text should be replaced by the official CVE description automatically.
— Launchpad
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-53685?
CVE-2024-53685 has a medium severity rating due to its potential to create an endless loop and block processes.
How do I fix CVE-2024-53685?
To fix CVE-2024-53685, ensure your Linux kernel is updated to the latest patched version that addresses this vulnerability.
What are the potential impacts of CVE-2024-53685?
CVE-2024-53685 can result in system instability and denial of service due to the endless loop behavior.
Which systems are affected by CVE-2024-53685?
CVE-2024-53685 affects the Linux Kernel, specifically impacting systems that utilize the Ceph file system.
What versions of the Linux kernel are vulnerable to CVE-2024-53685?
All versions of the Linux kernel prior to the patch for CVE-2024-53685 are considered vulnerable.