PT-2026-8197 · Cephfs+1 · Cephfs+1
Patrick Donnelly
·
Publicado
2026-01-01
·
Atualizado
2026-03-25
·
CVE-2026-23189
CVSS v3.1
5.5
Média
| Vetor | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions 6.18-rc1 and later
Description
The CephFS kernel client contains a flaw in the
ceph mds auth match() function where a NULL pointer dereference can occur if fs name is NULL. This issue arises during authorization checks within the CephFS client. The vulnerability is related to how the file system name is handled during the mounting process and authorization checks. The suggested resolution involves decoding fs name from the MDSMap and implementing strict authorization checks against it. The -o mds namespace=foo option should only be used for selecting the file system to mount and not for other purposes.Recommendations
Update to a newer version of the Linux kernel that includes the fix for this vulnerability.
Exploit
Correção
NULL Pointer Dereference
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Cephfs
Linux Kernel