CVE-2024-56563

A flaw was found in the Linux kernel's Ceph file system client. This flaw allows a local user to cause a Denial of Service (DoS) through memory exhaustion. The issue occurs because the kernel fails to release credential reference counts after performing access checks in the ceph_mds_check_access() function. By repeatedly triggering these access checks, a local attacker can leak kernel memory over time, potentially leading to system instability or a crash.

This vulnerability is rated as Low impact for Red Hat Enterprise Linux because exploitation requires local system access to an active Ceph file system mount and causes a gradual resource leak rather than immediate system failure or privilege escalation. CephFS is not mounted or utilized by default in standard installations, restricting the attack surface solely to deployments explicitly utilizing the kernel Ceph client. Furthermore, earlier stable releases of Red Hat Enterprise Linux do not contain the affected code introduced in newer upstream kernels, limiting overall exposure across the product portfolio.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.