CVE-2024-56563: ceph: fix cred leak in ceph_mds_check_access()

Severity: medium (CVSS 5.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2024-12-27 · updated 2026-08-04

Description

In the Linux kernel, the following vulnerability has been resolved: ceph: fix cred leak in ceph_mds_check_access() get_current_cred() increments the reference counter, but the put_cred() call was missing.

Affected products

Linux kernel: from 6.10 before 6.12.4 — fixed in 6.12.4

How to fix

Upgrade to a fixed version: Linux kernel 6.12.4. Check the vendor advisory for mitigations.

References

https://git.kernel.org/stable/c/c5cf420303256dcd6ff175643e9e9558543c2047
https://git.kernel.org/stable/c/e3d1c9e2b811f13bdbbb962c2b17a6091c28522c

Get alerted when CVE-2024-56563 or the next vulnerability affects your stack