Lucene search

Debian Security Bug TrackerDEBIANCVE:CVE-2023-52732

HistoryMay 21, 2024 - 4:15 p.m.

CVE-2023-52732

2024-05-2116:15:13

Debian Security Bug Tracker

security-tracker.debian.org

linux kernel

vulnerability

ceph

corrupted snap trace

mds

ios

metadatas

kclient

evict

caps

AI Score

6.9

Confidence

Low

EPSS

Percentile

9.0%

JSON

In the Linux kernel, the following vulnerability has been resolved: ceph: blocklist the kclient when receiving corrupted snap trace When received corrupted snap trace we don’t know what exactly has happened in MDS side. And we shouldn’t continue IOs and metadatas access to MDS, which may corrupt or get incorrect contents. This patch will just block all the further IO/MDS requests immediately and then evict the kclient itself. The reason why we still need to evict the kclient just after blocking all the further IOs is that the MDS could revoke the caps faster.

OSVersionArchitecturePackageVersionFilename
Debian12alllinux< 6.1.15-1linux_6.1.15-1_all.deb
Debian11alllinux<= 5.10.223-1linux_5.10.223-1_all.deb
Debian999alllinux< 6.1.15-1linux_6.1.15-1_all.deb
Debian13alllinux< 6.1.15-1linux_6.1.15-1_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	linux	< 6.1.15-1	linux_6.1.15-1_all.deb
Debian	11	all	linux	<= 5.10.223-1	linux_5.10.223-1_all.deb
Debian	999	all	linux	< 6.1.15-1	linux_6.1.15-1_all.deb
Debian	13	all	linux	< 6.1.15-1	linux_6.1.15-1_all.deb