CyberRota Analysis
AI-GeneratedThe vulnerability affects the Linux kernel's Ceph file system, specifically in the handling of MDSMap export_targets, where ranks greater than CEPH_MAX_MDS can lead to memory corruption due to improper bounds checking. This flaw could allow an attacker to manipulate memory, potentially leading to system instability or exploitation. Organizations using the Linux kernel with Ceph should prioritize addressing this issue to safeguard against potential security risks associated with unauthorized memory access.
Original NVD Description
In the Linux kernel, the following vulnerability has been resolved: ceph: reject export_targets ranks >= CEPH_MAX_MDS in mdsmap decode MDSMap export_targets entries are monitor controlled. check_new_map() uses each entry as a bit number in a fixed stack bitmap, so a rank outside the protocol namespace can make set_bit() write past the end of the array. Reject ranks outside CEPH_MAX_MDS while decoding the map. Do not validate against possible_max_rank here because maps may legitimately reference ranks beyond a temporarily reduced max_mds.