https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 22:41:27 +0000 https://vulnerability.circl.lu/vuln/cve-2025-21737 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>ceph: fix memory leak in ceph_mds_auth_match()</p> <p>We now free the temporary target path substring allocation on every possible branch, instead of omitting the default branch. In some cases, a memory leak occured, which could rapidly crash the system (depending on how many file accesses were attempted).</p> <p>This was detected in production because it caused a continuous memory growth, eventually triggering kernel OOM and completely hard-locking the kernel.</p> <p>Relevant kmemleak stacktrace:</p> <p>unreferenced object 0xffff888131e69900 (size 128): comm &#34;git&#34;, pid 66104, jiffies 4295435999 hex dump (first 32 bytes): 76 6f 6c 75 6d 65 73 2f 63 6f 6e 74 61 69 6e 65 volumes/containe 72 73 2f 67 69 74 65 61 2f 67 69 74 65 61 2f 67 rs/gitea/gitea/g backtrace (crc 2f3bb450): [&lt;ffffffffaa68fb49&gt;] __kmalloc_noprof+0x359/0x510 [&lt;ffffffffc32bf1df&gt;] ceph_mds_check_access+0x5bf/0x14e0 [ceph] [&lt;ffffffffc3235722&gt;] ceph_open+0x312/0xd80 [ceph] [&lt;ffffffffaa7dd786&gt;] do_dentry_open+0x456/0x1120 [&lt;ffffffffaa7e3729&gt;] vfs_open+0x79/0x360 [&lt;ffffffffaa832875&gt;] path_openat+0x1de5/0x4390 [&lt;ffffffffaa834fcc&gt;] do_filp_open+0x19c/0x3c0 [&lt;ffffffffaa7e44a1&gt;] do_sys_openat2+0x141/0x180 [&lt;ffffffffaa7e4945&gt;] __x64_sys_open+0xe5/0x1a0 [&lt;ffffffffac2cc2f7&gt;] do_syscall_64+0xb7/0x210 [&lt;ffffffffac400130&gt;] entry_SYSCALL_64_after_hwframe+…</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>ceph: fix memory leak in ceph_mds_auth_match()</p> <p>We now free the temporary target path substring allocation on every possible branch, instead of omitting the default branch. In some cases, a memory leak occured, which could rapidly crash the system (depending on how many file accesses were attempted).</p> <p>This was detected in production because it caused a continuous memory growth, eventually triggering kernel OOM and completely hard-locking the kernel.</p> <p>Relevant kmemleak stacktrace:</p> <p>unreferenced object 0xffff888131e69900 (size 128): comm &#34;git&#34;, pid 66104, jiffies 4295435999 hex dump (first 32 bytes): 76 6f 6c 75 6d 65 73 2f 63 6f 6e 74 61 69 6e 65 volumes/containe 72 73 2f 67 69 74 65 61 2f 67 69 74 65 61 2f 67 rs/gitea/gitea/g backtrace (crc 2f3bb450): [&lt;ffffffffaa68fb49&gt;] __kmalloc_noprof+0x359/0x510 [&lt;ffffffffc32bf1df&gt;] ceph_mds_check_access+0x5bf/0x14e0 [ceph] [&lt;ffffffffc3235722&gt;] ceph_open+0x312/0xd80 [ceph] [&lt;ffffffffaa7dd786&gt;] do_dentry_open+0x456/0x1120 [&lt;ffffffffaa7e3729&gt;] vfs_open+0x79/0x360 [&lt;ffffffffaa832875&gt;] path_openat+0x1de5/0x4390 [&lt;ffffffffaa834fcc&gt;] do_filp_open+0x19c/0x3c0 [&lt;ffffffffaa7e44a1&gt;] do_sys_openat2+0x141/0x180 [&lt;ffffffffaa7e4945&gt;] __x64_sys_open+0xe5/0x1a0 [&lt;ffffffffac2cc2f7&gt;] do_syscall_64+0xb7/0x210 [&lt;ffffffffac400130&gt;] entry_SYSCALL_64_after_hwframe+…</p> https://vulnerability.circl.lu/vuln/cve-2025-21737