by Kastro
Paper/Archive/CVE-2023-52732

CVE-2023-52732

Linux Linux — ceph: blocklist the kclient when receiving corrupted snap trace

EPSS 0.5%CVSS 9.8
critical.is priorityof 100
38
CVSS 9.8 (CNA)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 44.6.446 × 208.9No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

In the Linux kernel, the following vulnerability has been resolved: ceph: blocklist the kclient when receiving corrupted snap trace When received corrupted snap trace we don't know what exactly has happened in MDS side. And we shouldn't continue IOs and metadatas access to MDS, which may corrupt or get incorrect contents. This patch will just block all the further IO/MDS requests immediately and then evict the kclient itself. The reason why we still need to evict the kclient just after blocking all the further IOs is that the MDS could revoke the caps faster.

Affected

ProductAffectedFixed inSource
Linux9030aaf9bf0a1eee47a154c316c789e959638b0f – < 66ec619e4591f8350f99c5269a7ce160cccc7a7c66ec619e4591f8350f99c5269a7ce160cccc7a7cCNA
Linux9030aaf9bf0a1eee47a154c316c789e959638b0f – < a68e564adcaa69b0930809fb64d9d5f7d9c32ba9a68e564adcaa69b0930809fb64d9d5f7d9c32ba9CNA
Linux2.6.34–CNA

Scores by source

Linux (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: partial

References

refgit.kernel.org/stable/c/66ec619e4591f8350f99c5269a7ce160cccc7a7crefgit.kernel.org/stable/c/a68e564adcaa69b0930809fb64d9d5f7d9c32ba9