Re: [PATCH] fs/ceph/mds_client: give up on paths longer than PATH_MAX
From: Max Kellermann
Date: Tue Nov 19 2024 - 09:54:56 EST
On Tue, Nov 19, 2024 at 2:58 PM Patrick Donnelly <pdonnell@xxxxxxxxxx> wrote:
> The protocol does **not** require building the full path for most
> operations unless it involves a snapshot.
We don't use Ceph snapshots, but before today's emergency update, we
could shoot down an arbitrary server with a single (unprivileged)
system call using this vulnerability.
I'm not sure what your point is, but this vulnerability exists, it
works without snapshots and we think it's serious.