Executive brief
A memory management issue was identified in the Linux kernel's Ceph file system component. This flaw could lead to memory leaks or system instability because the system fails to properly release memory references during certain write operations. While primarily a technical stability issue, it could impact the reliability of servers using Ceph storage.
Technical details
A reference counting vulnerability exists in fs/ceph/addr.c within the Linux kernel. The function ceph_process_folio_batch fails to call folio_put() when encountering folios that are not suitable for writeback (e.g., when returning -ENODATA or failing folio_clear_dirty_for_io). Because folio_batch holds references to these folios, failing to decrement the reference count results in a memory leak. This issue was resolved by adding the missing folio_put() calls in the affected error paths. The fix has been backported to stable branches including 7.0.10 and is present in 7.1.
Affected products
- Linux Linux Kernel versions before 7.0.10, 7.1
Timeline
- 2026-05-11: patched: Initial fix committed to mainline kernel.
- 2026-06-24: disclosed: CVE published.