CVE-2024-56563

MEDIUM

Linux Kernel 6.10-6.12.3 - Credential Reference Leak in ceph_mds_check_access()

Title source: llm

Description

In the Linux kernel, the following vulnerability has been resolved: ceph: fix cred leak in ceph_mds_check_access() get_current_cred() increments the reference counter, but the put_cred() call was missing.

References (2)

Core 2

Core References

Patch

https://git.kernel.org/stable/c/e3d1c9e2b811f13bdbbb962c2b17a6091c28522c

Patch

https://git.kernel.org/stable/c/c5cf420303256dcd6ff175643e9e9558543c2047

Scores

CVSS v3 5.5

EPSS 0.0021

EPSS Percentile 10.6%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Details

Status published

Products (8)

linux/Kernel 6.10.0 - 6.12.4linux

Linux/Linux < 6.10

Linux/Linux 596afb0b8933ba6ed7227adcc538db26feb25c74 - c5cf420303256dcd6ff175643e9e9558543c2047

Linux/Linux 596afb0b8933ba6ed7227adcc538db26feb25c74 - e3d1c9e2b811f13bdbbb962c2b17a6091c28522c

Linux/Linux 6.10

Linux/Linux 6.12.4 - 6.12.*

Linux/Linux 6.13

linux/linux_kernel 6.10 - 6.12.4

Published Dec 27, 2024

Tracked Since Feb 18, 2026