In the Linux kernel, the following vulnerability has been resolved:
ceph: give up on paths longer than PATH_MAX
If the full path to be built by ceph_mdsc_build_path() happens to be longer than PATH_MAX, then this function will enter an endless (retry) loop, effectively blocking the whole task. Most of the machine becomes unusable, making this a very simple and effective DoS vulnerability.
I cannot imagine why this retry was ever implemented, but it seems rather useless and harmful to me. Let's remove it and fail with ENAMETOOLONG instead.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-toolsUpgrade perfUpgrade kernel-livepatch-5.10.234-225.895Upgrade kernel-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade bpftoolUpgrade kernel-tools-debuginfoUpgrade kernel-tools-develUpgrade kernel-develUpgrade kernelUpgrade perf-debuginfoUpgrade python-perfUpgrade python-perf-debuginfoUpgrade kernel-livepatch-5.15.178-120.178Upgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfo | Mar 14, 2025 | Jan 11, 2025 |
| Amazon_linux_2023 | — | Upgrade python3-perfUpgrade kernel-tools-develUpgrade kernel-modules-extra-commonUpgrade perf-debuginfoUpgrade kernel-headersUpgrade perfUpgrade kernel-develUpgrade kernel-debuginfoUpgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-modules-extraUpgrade bpftool-debuginfoUpgrade kernel-livepatch-6.1.127-135.201Upgrade kernel-libbpf-develUpgrade kernel-libbpfUpgrade bpftoolUpgrade python3-perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-libbpf-static | Mar 27, 2025 | Jan 11, 2025 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Feb 10, 2025 | Jan 11, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernelUpgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-tools | Apr 11, 2025 | Jan 11, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel | May 7, 2025 | Jan 11, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernel-toolsUpgrade kernelUpgrade kernel-tools-libsUpgrade bpftool | Apr 1, 2025 | Jan 11, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jan 11, 2025 |
| Ubuntu | — | Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oem-24.04bUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-ibmUpgrade linux-image-aws-lts-22.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-oem-24.04aUpgrade linux-image-virtualUpgrade linux-image-gkeop-6.8Upgrade linux-image-6.8.0-60-genericUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-5.15.0-1086-azure-fdeUpgrade linux-image-6.8.0-1030-gcpUpgrade linux-image-5.15.0-1033-nvidia-tegraUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-6.11.0-21-genericUpgrade linux-image-5.15.0-1080-awsUpgrade linux-image-5.15.0-136-genericUpgrade linux-image-6.11.0-1007-realtimeUpgrade linux-image-azure-lts-22.04Upgrade linux-image-6.8.0-1026-oracle-64kUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-5.15.0-1084-azureUpgrade linux-image-6.8.0-1028-nvidia-64kUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.11.0-1011-awsUpgrade linux-image-oem-22.04aUpgrade linux-image-genericUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-azure-nvidiaUpgrade linux-image-5.15.0-1077-intel-iotgUpgrade linux-image-oem-20.04bUpgrade linux-image-5.15.0-135-lowlatency-64kUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-5.15.0-135-lowlatencyUpgrade linux-image-gke-5.15Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-6.11.0-1011-gcp-64kUpgrade linux-image-oem-22.04bUpgrade linux-image-lowlatency-64kUpgrade linux-image-oracle-64kUpgrade linux-image-lowlatencyUpgrade linux-image-6.11.0-1013-oracleUpgrade linux-image-6.8.0-1029-azureUpgrade linux-image-5.15.0-1074-ibmUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-kvmUpgrade linux-image-oem-22.04cUpgrade linux-image-6.8.0-1029-awsUpgrade linux-image-ibm-classicUpgrade linux-image-nvidia-tegraUpgrade linux-image-5.15.0-136-generic-lpaeUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-6.11.0-1012-azureUpgrade linux-image-6.8.0-1028-nvidiaUpgrade linux-image-6.11.0-1011-lowlatency-64kUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-oem-20.04dUpgrade linux-image-5.15.0-1021-nvidia-tegra-igx-rtUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-135-generic-64kUpgrade linux-image-5.15.0-1021-nvidia-tegra-igxUpgrade linux-image-azure-fdeUpgrade linux-image-5.15.0-1076-kvmUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-gcpUpgrade linux-image-6.8.0-1028-oemUpgrade linux-image-6.8.0-1016-azure-nvidiaUpgrade linux-image-raspi-realtimeUpgrade linux-image-nvidia-64kUpgrade linux-image-oem-22.04Upgrade linux-image-generic-lpaeUpgrade linux-image-generic-64kUpgrade linux-image-5.15.0-1080-aws-fipsUpgrade linux-image-5.15.0-1074-nvidia-lowlatencyUpgrade linux-image-azure-lts-24.04Upgrade linux-image-nvidiaUpgrade linux-image-azure-fipsUpgrade linux-image-5.15.0-1077-oracleUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-1028-nvidia-lowlatency-64kUpgrade linux-image-5.15.0-1073-intel-iot-realtimeUpgrade linux-image-6.8.0-60-generic-64kUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-aws-lts-24.04Upgrade linux-image-nvidia-tegra-igxUpgrade linux-image-5.15.0-1077-gkeUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.15.0-1079-gcpUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-5.15.0-136-generic-64kUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-oem-20.04cUpgrade linux-image-6.11.0-1017-oemUpgrade linux-image-5.15.0-1083-azure-fipsUpgrade linux-image-5.15.0-1074-nvidiaUpgrade linux-image-5.15.0-1081-gcpUpgrade linux-image-6.11.0-1010-raspiUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-azureUpgrade linux-image-6.8.0-60-lowlatency-64kUpgrade linux-image-6.8.0-1012-gkeopUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-5.15.0-135-genericUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.8.0-1026-oracleUpgrade linux-image-azure-cvmUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-gcp-fipsUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-fipsUpgrade linux-image-6.11.0-1011-lowlatencyUpgrade linux-image-5.15.0-1080-realtimeUpgrade linux-image-awsUpgrade linux-image-intelUpgrade linux-image-6.8.0-2023-raspi-realtimeUpgrade linux-image-5.15.0-1033-nvidia-tegra-rtUpgrade linux-image-oracleUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-gcp-64kUpgrade linux-image-raspiUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.8.0-1030-gcp-64kUpgrade linux-image-6.8.0-1028-raspiUpgrade linux-image-5.15.0-1074-raspiUpgrade linux-image-5.15.0-135-fipsUpgrade linux-image-6.8.0-1028-nvidia-lowlatencyUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-5.15.0-1062-gkeopUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-5.15.0-1044-xilinx-zynqmpUpgrade linux-image-6.11.0-1011-gcpUpgrade linux-image-oem-20.04Upgrade linux-image-realtimeUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-aws-fipsUpgrade linux-image-nvidia-6.8Upgrade linux-image-gkeopUpgrade linux-image-6.8.0-1029-azure-fdeUpgrade linux-image-6.11.0-21-generic-64kUpgrade linux-image-5.15.0-135-generic-lpaeUpgrade linux-image-5.15.0-1086-azureUpgrade linux-image-5.15.0-1079-gcp-fipsUpgrade linux-image-intel-iotgUpgrade linux-image-6.8.0-1025-gkeUpgrade linux-image-5.15.0-1072-ibmUpgrade linux-image-oem-22.04dUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-6.11.0-1013-oracle-64kUpgrade linux-image-6.8.1-1022-realtimeUpgrade linux-image-6.8.0-1026-ibmUpgrade linux-image-6.11.0-1012-azure-fdeUpgrade linux-image-5.15.0-1075-intel-iotgUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-oem-24.04Upgrade linux-image-6.8.0-60-lowlatencyUpgrade linux-image-gkeUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-generic-hwe-20.04 | Mar 28, 2025 | Jan 11, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 29, 2025 | Jan 11, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub