CVE-2024-57942
kernel: netfs: Fix ceph copy to cache on write-begin
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · January 21, 2025
Updated · November 3, 2026
Description
A flaw was found in the Linux kernel's network filesystem (netfs) subsystem. A local user with write permissions to a Ceph file system configured with local caching can trigger a kernel hang, resulting in a denial of service (DoS). This issue occurs because memory tracking entries are cleared prematurely during write operations, preventing the caching mechanism from locating the required data.
Statement
This vulnerability is rated as Moderate impact for Red Hat Enterprise Linux because triggering it requires a local authenticated user with write access to an active Ceph mount configured with local caching, resulting in a kernel hang and denial of service with no impact on confidentiality or data integrity. Standard deployments are not exposed by default, as utilizing FS-Cache requires running the cachefiles service and mounting Ceph with the non-default fsc option.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-835 · Loop with Unreachable Exit Condition