In the Linux kernel, the following vulnerability has been resolved:
ceph: give up on paths longer than PATH_MAX
If the full path to be built by ceph_mdsc_build_path() happens to be longer than PATH_MAX, then this function will enter an endless (retry) loop, effectively blocking the whole task. Most of the machine becomes unusable, making this a very simple and effective DoS vulnerability.
I cannot imagine why this retry was ever implemented, but it seems rather useless and harmful to me. Let's remove it and fail with ENAMETOOLONG instead.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade python-perf-debuginfoUpgrade python-perfUpgrade kernelUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-5.15.178-120.178Upgrade perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-tools-develUpgrade kernel-livepatch-5.10.234-225.895Upgrade kernel-develUpgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-debuginfoUpgrade bpftoolUpgrade kernel-debuginfoUpgrade perf | Mar 14, 2025 | Jan 11, 2025 |
| Amazon_linux_2023 | — | Upgrade kernel-debuginfoUpgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade kernel-modules-extra-commonUpgrade perf-debuginfoUpgrade perfUpgrade kernel-headersUpgrade python3-perfUpgrade kernel-tools-develUpgrade python3-perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-libbpf-staticUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-modules-extraUpgrade kernel-livepatch-6.1.127-135.201Upgrade kernel-libbpf-develUpgrade kernel-libbpfUpgrade bpftool | Mar 27, 2025 | Jan 11, 2025 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Feb 10, 2025 | Jan 11, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-toolsUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade kernel | Apr 11, 2025 | Jan 11, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade bpftool | May 7, 2025 | Jan 11, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel | Apr 1, 2025 | Jan 11, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jan 11, 2025 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1030-gcp-64kUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-raspiUpgrade linux-image-azure-cvmUpgrade linux-image-6.11.0-1011-lowlatencyUpgrade linux-image-6.8.0-1029-azure-fdeUpgrade linux-image-gkeopUpgrade linux-image-5.15.0-1044-xilinx-zynqmpUpgrade linux-image-5.15.0-1062-gkeopUpgrade linux-image-aws-fipsUpgrade linux-image-6.8.0-1028-nvidia-lowlatencyUpgrade linux-image-5.15.0-1074-raspiUpgrade linux-image-intel-iotgUpgrade linux-image-6.8.0-1025-gkeUpgrade linux-image-6.8.0-2023-raspi-realtimeUpgrade linux-image-intelUpgrade linux-image-6.8.0-1028-raspiUpgrade linux-image-5.15.0-1080-realtimeUpgrade linux-image-5.15.0-135-fipsUpgrade linux-image-6.8.0-60-lowlatencyUpgrade linux-image-5.15.0-135-generic-lpaeUpgrade linux-image-5.15.0-1086-azureUpgrade linux-image-oem-22.04dUpgrade linux-image-5.15.0-1079-gcp-fipsUpgrade linux-image-6.11.0-1011-gcpUpgrade linux-image-azureUpgrade linux-image-5.15.0-136-generic-64kUpgrade linux-image-5.15.0-1083-azure-fipsUpgrade linux-image-oem-20.04cUpgrade linux-image-6.8.0-1012-gkeopUpgrade linux-image-6.8.0-60-lowlatency-64kUpgrade linux-image-5.15.0-1081-gcpUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-5.15.0-1077-oracleUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-gkeUpgrade linux-image-5.15.0-1079-gcpUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.8.0-1028-nvidia-lowlatency-64kUpgrade linux-image-6.11.0-1017-oemUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.15.0-1075-intel-iotgUpgrade linux-image-6.8.0-60-generic-64kUpgrade linux-image-5.15.0-1072-ibmUpgrade linux-image-6.8.1-1022-realtimeUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-aws-lts-24.04Upgrade linux-image-6.11.0-1012-azure-fdeUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-gcp-64kUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-5.15.0-1033-nvidia-tegra-rtUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-oracleUpgrade linux-image-awsUpgrade linux-image-6.8.0-1026-ibmUpgrade linux-image-6.11.0-1010-raspiUpgrade linux-image-oem-20.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-nvidia-tegra-igxUpgrade linux-image-5.15.0-1073-intel-iot-realtimeUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-5.15.0-1077-gkeUpgrade linux-image-gkeop-5.15Upgrade linux-image-6.11.0-1013-oracle-64kUpgrade linux-image-6.11.0-21-generic-64kUpgrade linux-image-nvidia-6.8Upgrade linux-image-oem-24.04Upgrade linux-image-realtimeUpgrade linux-image-5.15.0-135-genericUpgrade linux-image-6.8.0-1026-oracleUpgrade linux-image-gcp-fipsUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-fipsUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.15.0-1074-nvidiaUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.15.0-135-generic-64kUpgrade linux-image-6.8.0-1030-gcpUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-5.15.0-1021-nvidia-tegra-igx-rtUpgrade linux-image-generic-64kUpgrade linux-image-azure-fipsUpgrade linux-image-6.8.0-1016-azure-nvidiaUpgrade linux-image-azure-lts-24.04Upgrade linux-image-generic-lpaeUpgrade linux-image-aws-lts-22.04Upgrade linux-image-oem-24.04aUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-6.11.0-1011-gcp-64kUpgrade linux-image-5.15.0-136-genericUpgrade linux-image-6.11.0-1011-awsUpgrade linux-image-5.15.0-1033-nvidia-tegraUpgrade linux-image-virtualUpgrade linux-image-oem-24.04bUpgrade linux-image-5.15.0-1086-azure-fdeUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-nvidiaUpgrade linux-image-6.11.0-1011-lowlatency-64kUpgrade linux-image-oem-20.04dUpgrade linux-image-5.15.0-136-generic-lpaeUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-5.15.0-135-lowlatency-64kUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-6.11.0-1013-oracleUpgrade linux-image-6.8.0-1028-nvidiaUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-genericUpgrade linux-image-raspi-nolpaeUpgrade linux-image-oem-22.04aUpgrade linux-image-azure-lts-22.04Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-oem-20.04bUpgrade linux-image-gke-5.15Upgrade linux-image-5.15.0-1084-azureUpgrade linux-image-kvmUpgrade linux-image-5.15.0-1080-awsUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.11.0-21-genericUpgrade linux-image-ibmUpgrade linux-image-oem-22.04cUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-nvidia-64kUpgrade linux-image-5.15.0-1077-intel-iotgUpgrade linux-image-gcpUpgrade linux-image-6.8.0-1028-oemUpgrade linux-image-6.8.0-60-genericUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-5.15.0-1074-ibmUpgrade linux-image-5.15.0-1076-kvmUpgrade linux-image-6.8.0-1029-awsUpgrade linux-image-raspi-realtimeUpgrade linux-image-6.11.0-1007-realtimeUpgrade linux-image-azure-nvidiaUpgrade linux-image-lowlatencyUpgrade linux-image-oem-22.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-nvidia-tegraUpgrade linux-image-5.15.0-135-lowlatencyUpgrade linux-image-6.8.0-1028-nvidia-64kUpgrade linux-image-6.11.0-1012-azureUpgrade linux-image-5.15.0-1021-nvidia-tegra-igxUpgrade linux-image-6.8.0-1029-azureUpgrade linux-image-6.8.0-1026-oracle-64kUpgrade linux-image-oem-22.04bUpgrade linux-image-5.15.0-1074-nvidia-lowlatencyUpgrade linux-image-azure-fdeUpgrade linux-image-5.15.0-1080-aws-fipsUpgrade linux-image-oracle-64kUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-ibm-classic | Mar 28, 2025 | Jan 11, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 29, 2025 | Jan 11, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub