Linux Kernel Ceph Component Denial-of-Service Vulnerability

Vulnerability

A denial-of-service vulnerability has been identified in the Linux kernel's Ceph component. The issue arises in the function 'ceph_mdsc_build_path()', which can enter an infinite loop if the generated path exceeds the maximum allowed length. This endless retry process effectively freezes the entire task, rendering most of the machine unusable.

Impact

Exploitation of this vulnerability leads to a denial-of-service condition, causing the affected task to become unresponsive and disrupting normal system operations.

Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM

Vulnerability Rating

Custom Algorithm
spread
9.0
impact
2.5
exploitability
5.3
remediation
0.0
relevance
0.0
threat
3.2
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.