Description
In the Linux kernel, the following vulnerability has been resolved: ceph: fix memory leaks in ceph_mdsc_build_path() Add __putname() calls to error code paths that did not free the "path" pointer obtained by __getname(). If ownership of this pointer is not passed to the caller via path_info.path, the function must free it before returning.
References (5)
Core 5
Core References
Scores
CVSS v3
5.5
EPSS
0.0012
EPSS Percentile
2.3%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Details
CWE
CWE-401
Status
published
Products (24)
linux/Kernel
6.13.0 - 6.18.19linux
linux/Kernel
6.19.0 - 6.19.9linux
linux/Kernel
6.6.0 - 6.6.130linux
linux/Kernel
6.7.0 - 6.12.78linux
Linux/Linux
< 6.6
Linux/Linux
0f2b2d9e881c90402dbe28f9ba831775b7992e1f
Linux/Linux
3fd945a79e147ee10f84213976889b29049c3519 - 040d159a45ded7f33201421a81df0aa2a86e5a0b
Linux/Linux
3fd945a79e147ee10f84213976889b29049c3519 - 097cd68f46686391a98f2618188f0cb7b7570de2
Linux/Linux
3fd945a79e147ee10f84213976889b29049c3519 - 13b8b9d6f59ef17fb96c298c3a0d62a8306950cc
Linux/Linux
3fd945a79e147ee10f84213976889b29049c3519 - 5895d0164c84d7fec6abc198920c257f55c51899
... and 14 more
Published
May 08, 2026
Tracked Since
May 08, 2026