CVE-2026-43419 PUBLISHED

ceph: fix memory leaks in ceph_mdsc_build_path()

Assigner: Linux
Reserved: 01.05.2026 Published: 08.05.2026 Updated: 08.05.2026

In the Linux kernel, the following vulnerability has been resolved:

ceph: fix memory leaks in ceph_mdsc_build_path()

Add __putname() calls to error code paths that did not free the "path" pointer obtained by __getname(). If ownership of this pointer is not passed to the caller via path_info.path, the function must free it before returning.

Product Status

Vendor Linux
Product Linux
Versions Default: unaffected
  • affected from 3fd945a79e147ee10f84213976889b29049c3519 to 657dc653b06a3cc0282aea447a3f137fa94066a4 (excl.)
  • affected from 3fd945a79e147ee10f84213976889b29049c3519 to 5895d0164c84d7fec6abc198920c257f55c51899 (excl.)
  • affected from 3fd945a79e147ee10f84213976889b29049c3519 to 097cd68f46686391a98f2618188f0cb7b7570de2 (excl.)
  • affected from 3fd945a79e147ee10f84213976889b29049c3519 to 13b8b9d6f59ef17fb96c298c3a0d62a8306950cc (excl.)
  • affected from 3fd945a79e147ee10f84213976889b29049c3519 to 040d159a45ded7f33201421a81df0aa2a86e5a0b (excl.)
  • Version 0f2b2d9e881c90402dbe28f9ba831775b7992e1f is affected
  • Version d42ad3f161a5a487f81915c406f46943c7187a0a is affected
  • Version e4b168c64da06954be5d520f6c16469b1cadc069 is affected
Vendor Linux
Product Linux
Versions Default: affected
  • Version 6.6 is affected
  • unaffected from 0 to 6.6 (excl.)
  • unaffected from 6.6.130 to 6.6.* (incl.)
  • unaffected from 6.12.78 to 6.12.* (incl.)
  • unaffected from 6.18.19 to 6.18.* (incl.)
  • unaffected from 6.19.9 to 6.19.* (incl.)
  • unaffected from 7.0 to * (incl.)

References