Log in Start free

Vulnerability · Published May 21, 2024 · Assigned by Linux

CVE-2023-52732ceph: blocklist the kclient when receiving corrupted snap trace

Critical 9.8

In plain English

A critical-severity security flaw in Linux from Linux. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 45% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)9.8Critical
Exploit odds (30 days)0.5%top 55.2% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

In the Linux kernel, the following vulnerability has been resolved: ceph: blocklist the kclient when receiving corrupted snap trace When received corrupted snap trace we don't know what exactly has happened in MDS side. And we shouldn't continue IOs and metadatas access to MDS, which may corrupt or get incorrect contents. This patch will just block all the further IO/MDS requests immediately and then evict the kclient itself. The reason why we still need to evict the kclient just after blocking all the further IOs is that the MDS could revoke the caps faster.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Debian:12linux6.1.15-1DEBIAN-CVE-2023-52732
Debian:13linux6.1.15-1DEBIAN-CVE-2023-52732
Debian:14linux6.1.15-1DEBIAN-CVE-2023-52732
Ubuntu:22.04:LTSlinuxno fix listedUBUNTU-CVE-2023-52732
Ubuntu:22.04:LTSlinux-allwinner-5.19no fix listedUBUNTU-CVE-2023-52732
Ubuntu:22.04:LTSlinux-awsno fix listedUBUNTU-CVE-2023-52732
Ubuntu:22.04:LTSlinux-aws-5.19no fix listedUBUNTU-CVE-2023-52732
Ubuntu:22.04:LTSlinux-aws-6.2no fix listedUBUNTU-CVE-2023-52732
Ubuntu:22.04:LTSlinux-azureno fix listedUBUNTU-CVE-2023-52732
Ubuntu:22.04:LTSlinux-azure-5.19no fix listedUBUNTU-CVE-2023-52732
Ubuntu:22.04:LTSlinux-azure-6.2no fix listedUBUNTU-CVE-2023-52732
Ubuntu:22.04:LTSlinux-azure-fdeno fix listedUBUNTU-CVE-2023-52732
Ubuntu:22.04:LTSlinux-azure-fde-5.19no fix listedUBUNTU-CVE-2023-52732
Ubuntu:22.04:LTSlinux-azure-fde-6.2no fix listedUBUNTU-CVE-2023-52732
Ubuntu:22.04:LTSlinux-gcpno fix listedUBUNTU-CVE-2023-52732
Ubuntu:22.04:LTSlinux-gcp-5.19no fix listedUBUNTU-CVE-2023-52732
Ubuntu:22.04:LTSlinux-gcp-6.2no fix listedUBUNTU-CVE-2023-52732
Ubuntu:22.04:LTSlinux-gkeno fix listedUBUNTU-CVE-2023-52732
Ubuntu:22.04:LTSlinux-gkeopno fix listedUBUNTU-CVE-2023-52732
Ubuntu:22.04:LTSlinux-hwe-5.19no fix listedUBUNTU-CVE-2023-52732
Ubuntu:22.04:LTSlinux-hwe-6.2no fix listedUBUNTU-CVE-2023-52732
Ubuntu:22.04:LTSlinux-ibmno fix listedUBUNTU-CVE-2023-52732
Ubuntu:22.04:LTSlinux-intel-iot-realtimeno fix listedUBUNTU-CVE-2023-52732
Ubuntu:22.04:LTSlinux-intel-iotgno fix listedUBUNTU-CVE-2023-52732
Ubuntu:22.04:LTSlinux-kvmno fix listedUBUNTU-CVE-2023-52732
Ubuntu:22.04:LTSlinux-lowlatencyno fix listedUBUNTU-CVE-2023-52732
Ubuntu:22.04:LTSlinux-lowlatency-hwe-5.19no fix listedUBUNTU-CVE-2023-52732
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.2no fix listedUBUNTU-CVE-2023-52732
Ubuntu:22.04:LTSlinux-nvidiano fix listedUBUNTU-CVE-2023-52732
Ubuntu:22.04:LTSlinux-nvidia-6.2no fix listedUBUNTU-CVE-2023-52732
Ubuntu:22.04:LTSlinux-nvidia-tegrano fix listedUBUNTU-CVE-2023-52732
Ubuntu:22.04:LTSlinux-nvidia-tegra-igxno fix listedUBUNTU-CVE-2023-52732
Ubuntu:22.04:LTSlinux-oem-5.17no fix listedUBUNTU-CVE-2023-52732
Ubuntu:22.04:LTSlinux-oem-6.0no fix listedUBUNTU-CVE-2023-52732
Ubuntu:22.04:LTSlinux-oem-6.1no fix listedUBUNTU-CVE-2023-52732
Ubuntu:22.04:LTSlinux-oracleno fix listedUBUNTU-CVE-2023-52732
Ubuntu:22.04:LTSlinux-raspino fix listedUBUNTU-CVE-2023-52732
Ubuntu:24.04:LTSlinux-raspi-realtimeno fix listedUBUNTU-CVE-2023-52732
Ubuntu:22.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2023-52732
Ubuntu:22.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2023-52732
Ubuntu:22.04:LTSlinux-riscv-5.19no fix listedUBUNTU-CVE-2023-52732
Ubuntu:22.04:LTSlinux-starfive-5.19no fix listedUBUNTU-CVE-2023-52732
Ubuntu:22.04:LTSlinux-starfive-6.2no fix listedUBUNTU-CVE-2023-52732
Ubuntu:22.04:LTSlinux-xilinx-zynqmpno fix listedUBUNTU-CVE-2023-52732

Affected products (as reported)

VendorProductVersions
Linux Linux 9030aaf9bf0a1eee47a154c316c789e959638b0f – before 66ec619e4591f8350f99c5269a7ce160cccc7a7c9030aaf9bf0a1eee47a154c316c789e959638b0f – before a68e564adcaa69b0930809fb64d9d5f7d9c32ba9
Linux Linux 2.6.34

References