CVE-2026-43419

ceph: fix memory leaks in ceph_mdsc_build_path()

MEDIUM

5.5

CVSS Score

Published: May 8, 2026 at 02:21 PM UTC

Updated: October 30, 2026 at 01:18 PM UTC

1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

MEDIUM5.5

Exploit prediction

EPSS 0.1%

Description

In the Linux kernel, the following vulnerability has been resolved: ceph: fix memory leaks in ceph_mdsc_build_path() Add __putname() calls to error code paths that did not free the "path" pointer obtained by __getname(). If ownership of this pointer is not passed to the caller via path_info.path, the function must free it before returning.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Linux Kernel · Linux

95%

5.10.234 ≤ v < 5.115.15.177 ≤ v < 5.166.1.125 ≤ v < 6.26.13 ≤ v < 6.18.196.19 ≤ v < 6.19.96.6 ≤ v < 6.6.1306.7 ≤ v < 6.12.780f2b2d9e881c90402dbe28f9ba831775b7992e1f3fd945a79e147ee10f84213976889b29049c35195.10.234 5.15.177 6.1.125 6.6 7.0 7.0 rc1 7.0 rc2 7.0 rc3d42ad3f161a5a487f81915c406f46943c7187a0ae4b168c64da06954be5d520f6c16469b1cadc069

Vendor states this is fixed in 040d159a45ded7f33201421a81df0aa2a86e5a0b (fixed)

Vendor states this is fixed in 097cd68f46686391a98f2618188f0cb7b7570de2 (fixed)

Vendor states this is fixed in 13b8b9d6f59ef17fb96c298c3a0d62a8306950cc (fixed)

Vendor states this is fixed in 5895d0164c84d7fec6abc198920c257f55c51899 (fixed)

Vendor states this is fixed in 657dc653b06a3cc0282aea447a3f137fa94066a4 (fixed)

Affected range stops below 5.11, so it looks safe — our inference, not a vendor statement

Affected range stops below 5.16, so it looks safe — our inference, not a vendor statement

Vendor states this is fixed in 6.1.191 (unaffected)

Vendor states this is fixed in 6.12.78 (unaffected)

Vendor states this is fixed in 6.18.19 (unaffected)

Vendor states this is fixed in 6.19.9 (unaffected)

Affected range stops below 6.2, so it looks safe — our inference, not a vendor statement