In the Linux kernel, the following vulnerability has been resolved:
ceph: give up on paths longer than PATH_MAX
If the full path to be built by ceph_mdsc_build_path() happens to be longer than PATH_MAX, then this function will enter an endless (retry) loop, effectively blocking the whole task. Most of the machine becomes unusable, making this a very simple and effective DoS vulnerability.
I cannot imagine why this retry was ever implemented, but it seems rather useless and harmful to me. Let's remove it and fail with ENAMETOOLONG instead.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-develUpgrade kernel-toolsUpgrade kernel-livepatch-5.10.234-225.895Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-develUpgrade perfUpgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade bpftoolUpgrade kernelUpgrade python-perfUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-5.15.178-120.178Upgrade kernel-headersUpgrade bpftool-debuginfoUpgrade python-perf-debuginfo | Mar 14, 2025 | Jan 11, 2025 |
| Amazon_linux_2023 | — | Upgrade kernel-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-headersUpgrade python3-perfUpgrade kernel-tools-develUpgrade perfUpgrade perf-debuginfoUpgrade kernel-develUpgrade kernel-toolsUpgrade kernel-modules-extra-commonUpgrade python3-perf-debuginfoUpgrade kernelUpgrade kernel-tools-debuginfoUpgrade kernel-libbpf-staticUpgrade bpftool-debuginfoUpgrade kernel-modules-extraUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpf-develUpgrade kernel-libbpfUpgrade kernel-livepatch-6.1.127-135.201Upgrade bpftool | Mar 27, 2025 | Jan 11, 2025 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Feb 10, 2025 | Jan 11, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade python3-perf | Apr 11, 2025 | Jan 11, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade bpftoolUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernelUpgrade python3-perf | May 7, 2025 | Jan 11, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernelUpgrade bpftoolUpgrade kernel-tools-libs | Apr 1, 2025 | Jan 11, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jan 11, 2025 |
| Ubuntu | — | Upgrade linux-image-kvmUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.11.0-1013-oracleUpgrade linux-image-raspi-nolpaeUpgrade linux-image-ibmUpgrade linux-image-6.8.0-60-genericUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-oem-22.04cUpgrade linux-image-6.8.0-1029-awsUpgrade linux-image-oem-22.04bUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-6.8.0-1029-azureUpgrade linux-image-5.15.0-1021-nvidia-tegra-igxUpgrade linux-image-oem-22.04Upgrade linux-image-6.11.0-1012-azureUpgrade linux-image-6.8.0-1028-nvidia-64kUpgrade linux-image-6.8.0-1030-gcpUpgrade linux-image-nvidia-tegraUpgrade linux-image-5.15.0-135-lowlatency-64kUpgrade linux-image-6.11.0-21-genericUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-5.15.0-1080-aws-fipsUpgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-1016-azure-nvidiaUpgrade linux-image-5.15.0-1077-intel-iotgUpgrade linux-image-nvidia-64kUpgrade linux-image-5.15.0-1084-azureUpgrade linux-image-genericUpgrade linux-image-oem-20.04bUpgrade linux-image-5.15.0-1074-ibmUpgrade linux-image-6.8.0-1028-nvidiaUpgrade linux-image-5.15.0-1076-kvmUpgrade linux-image-lowlatency-64kUpgrade linux-image-gcpUpgrade linux-image-6.11.0-1011-lowlatency-64kUpgrade linux-image-azure-nvidiaUpgrade linux-image-ibm-classicUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-generic-64kUpgrade linux-image-5.15.0-135-lowlatencyUpgrade linux-image-5.15.0-136-generic-lpaeUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-azure-lts-24.04Upgrade linux-image-5.15.0-1074-nvidia-lowlatencyUpgrade linux-image-raspi-realtimeUpgrade linux-image-oem-20.04dUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-6.11.0-1007-realtimeUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-5.15.0-1080-awsUpgrade linux-image-5.15.0-135-generic-64kUpgrade linux-image-oem-22.04aUpgrade linux-image-gke-5.15Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-azure-fipsUpgrade linux-image-5.15.0-1021-nvidia-tegra-igx-rtUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-azure-fdeUpgrade linux-image-aws-lts-22.04Upgrade linux-image-nvidiaUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-generic-lpaeUpgrade linux-image-5.15.0-1086-azure-fdeUpgrade linux-image-6.11.0-1011-awsUpgrade linux-image-5.15.0-1033-nvidia-tegraUpgrade linux-image-6.11.0-1011-gcp-64kUpgrade linux-image-lowlatencyUpgrade linux-image-virtualUpgrade linux-image-5.15.0-136-genericUpgrade linux-image-oem-24.04aUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-6.8.0-1026-oracle-64kUpgrade linux-image-6.8.0-1028-oemUpgrade linux-image-gkeop-6.8Upgrade linux-image-oem-24.04bUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-1012-gkeopUpgrade linux-image-6.11.0-1010-raspiUpgrade linux-image-5.15.0-1072-ibmUpgrade linux-image-5.15.0-1074-nvidiaUpgrade linux-image-fipsUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-5.15.0-1081-gcpUpgrade linux-image-5.15.0-135-genericUpgrade linux-image-6.8.0-1026-ibmUpgrade linux-image-6.8.0-60-generic-64kUpgrade linux-image-6.8.1-1022-realtimeUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-oem-24.04Upgrade linux-image-gcp-64kUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-6.8.0-1026-oracleUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.15.0-1079-gcpUpgrade linux-image-6.8.0-1029-azure-fdeUpgrade linux-image-oem-22.04dUpgrade linux-image-nvidia-6.8Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-gkeopUpgrade linux-image-aws-fipsUpgrade linux-image-6.11.0-21-generic-64kUpgrade linux-image-intel-iotgUpgrade linux-image-6.8.0-1025-gkeUpgrade linux-image-6.11.0-1011-gcpUpgrade linux-image-5.15.0-1086-azureUpgrade linux-image-5.15.0-1079-gcp-fipsUpgrade linux-image-5.15.0-1044-xilinx-zynqmpUpgrade linux-image-6.8.0-1028-raspiUpgrade linux-image-5.15.0-135-generic-lpaeUpgrade linux-image-6.8.0-2023-raspi-realtimeUpgrade linux-image-awsUpgrade linux-image-6.8.0-1028-nvidia-lowlatencyUpgrade linux-image-6.11.0-1011-lowlatencyUpgrade linux-image-5.15.0-135-fipsUpgrade linux-image-5.15.0-1080-realtimeUpgrade linux-image-5.15.0-1074-raspiUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-5.15.0-1062-gkeopUpgrade linux-image-raspiUpgrade linux-image-6.8.0-1030-gcp-64kUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-intelUpgrade linux-image-5.15.0-136-generic-64kUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-6.11.0-1013-oracle-64kUpgrade linux-image-oracleUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-realtimeUpgrade linux-image-gkeUpgrade linux-image-6.8.0-60-lowlatencyUpgrade linux-image-6.8.0-1028-nvidia-lowlatency-64kUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.15.0-1077-oracleUpgrade linux-image-5.15.0-1033-nvidia-tegra-rtUpgrade linux-image-6.8.0-60-lowlatency-64kUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-azureUpgrade linux-image-6.11.0-1012-azure-fdeUpgrade linux-image-6.11.0-1017-oemUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-oem-20.04Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-5.15.0-1077-gkeUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.15.0-1073-intel-iot-realtimeUpgrade linux-image-gkeop-5.15Upgrade linux-image-azure-cvmUpgrade linux-image-5.15.0-1075-intel-iotgUpgrade linux-image-gcp-fipsUpgrade linux-image-aws-lts-24.04Upgrade linux-image-oem-20.04cUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.15.0-1083-azure-fips | Mar 28, 2025 | Jan 11, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 29, 2025 | Jan 11, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub