CyberRota Analysis
AI-GeneratedThe vulnerability affects the Linux kernel's handling of debugfs files in the Ceph distributed storage system, specifically during the client teardown process. An attacker could exploit a use-after-free condition that occurs when a concurrent read of the monmap debugfs file happens after the monitor client has been stopped, potentially leading to unauthorized access or system instability. Organizations utilizing Linux with Ceph should prioritize this issue to mitigate risks associated with data integrity and system security.
Original NVD Description
In the Linux kernel, the following vulnerability has been resolved: libceph: remove debugfs files before client teardown ceph_destroy_client() tears down the monitor client before removing the per-client debugfs files. A concurrent read of the monmap debugfs file can enter monmap_show() after ceph_monc_stop() has freed monc->monmap, triggering a use-after-free. Remove the debugfs files before stopping the OSD and monitor clients. debugfs_remove() drains active handlers and prevents new accesses, so the debugfs callbacks can no longer race the rest of client teardown.