CVE-2024-26689

Summary

CVE-2024-26689 is a Linux kernel vulnerability in the ceph file system. In the encode_cap_msg() function of fs/ceph/caps.c, a use-after-free error was identified. Before the refcount could be incremented at 'ceph_buffer_get(arg->xattr_buf)', the resource was already freed at 'ceph_buffer_put(ci->i_xattrs.blob)'. This occurred due to a race condition between the decrement and increment operations. encode_cap_msg() is called by __send_cap() and __send_cap() is called by ceph_check_caps(). The issue lies in the assignment of arg->xattr_buf to ci->i_xattrs.blob in __prep_cap(), which necessitates the refcount increase to prevent the use-after-free error.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.