CVE-2026-43419
Memory Leak in Linux Kernel CephFS
Publication date: 2026-05-08
Last updated on: 2026-05-08
Assigner: kernel.org
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| ceph | ceph | * |
| linux | linux_kernel | * |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-UNKNOWN |
Attack-Flow Graph
AI Powered Q&A
How can this vulnerability impact me? :
Memory leaks can lead to increased memory usage over time, which may degrade system performance or cause resource exhaustion.
In environments running the affected Ceph component in the Linux kernel, this could potentially lead to instability or crashes if the leak is significant.
Can you explain this vulnerability to me?
This vulnerability is a memory leak issue in the Linux kernel related to the Ceph component, specifically in the function ceph_mdsc_build_path().
The problem occurs because certain error code paths did not properly free a memory pointer named "path" that was obtained by the __getname() function.
To fix this, __putname() calls were added to those error paths to ensure the allocated memory is freed if ownership of the pointer is not passed to the caller.