CVE Database›Document archive›CVE-2024-57942

CVE-2024-57942

kernel: netfs: Fix ceph copy to cache on write-begin

Loading…

Severity

Moderate

Red Hat Product Security

5.5

CVSS 3.1

Review impact separately from score.

Published · January 21, 2025

Updated · November 3, 2026

Description

A flaw was found in the Linux kernel's network filesystem (netfs) subsystem. A local user with write permissions to a Ceph file system configured with local caching can trigger a kernel hang, resulting in a denial of service (DoS). This issue occurs because memory tracking entries are cleared prematurely during write operations, preventing the caching mechanism from locating the required data.

Statement

This vulnerability is rated as Moderate impact for Red Hat Enterprise Linux because triggering it requires a local authenticated user with write access to an active Ceph mount configured with local caching, resulting in a kernel hang and denial of service with no impact on confidentiality or data integrity. Standard deployments are not exposed by default, as utilizing FS-Cache requires running the cachefiles service and mounting Ceph with the non-default fsc option.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.1 · 5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-835 · Loop with Unreachable Exit Condition