Riskcovery

CVE-2024-56710

ceph: fix memory leak in ceph_direct_read_write()

State
Published
Severity
3.3 Low
Published
Dec 29, 2024
Updated
May 11, 2026
Reserved
Dec 27, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

ceph: fix memory leak in ceph_direct_read_write()

The bvecs array which is allocated in iter_get_bvecs_alloc() is leaked and pages remain pinned if ceph_alloc_sparse_ext_map() fails.

There is no need to delay the allocation of sparse_ext map until after the bvecs array is set up, so fix this by moving sparse_ext allocation a bit earlier. Also, make a similar adjustment in __ceph_sync_read() for consistency (a leak of the same kind in __ceph_sync_read() has been addressed differently).

Scores

CVSSScoreVectorSource
3.13.3 LowCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:LCISA-ADP

Weaknesses

  • CWE-401 Missing Release of Memory after Effective Lifetime

Affected Products

ProductVersions
LinuxLinux
  • 03bc06c7b0bd8d86b9f17f459acaeb1283ba2700 to before 44e518abbb498075ae85c7d1d1a503a6bb05ea2dAffected
  • 03bc06c7b0bd8d86b9f17f459acaeb1283ba2700 to before eb9041837123f31d5897e99bb761f46cb4ce5859Affected
  • 03bc06c7b0bd8d86b9f17f459acaeb1283ba2700 to before 66e0c4f91461d17d48071695271c824620bed4efAffected
LinuxLinux
  • 6.6Affected
  • before 6.6Not affected
  • 6.6.69 through 6.6.*Not affected
  • 6.12.7 through 6.12.*Not affected
  • 6.13 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.