A vulnerability in the Linux kernel Ceph filesystem driver allows a local attacker to trigger a kernel panic and system denial of service by causing an inode reference leak.

This is a resource management flaw in the Ceph filesystem component where an inode reference is leaked during a writeback abort operation. The vulnerability requires low privileges (local access) to trigger, as the failure occurs specifically during the filesystem unmount process.

The primary impact of this vulnerability is a kernel panic, which results in an immediate and unplanned system crash. Given the CVSS score of 7.8, this represents a significant risk to system availability, particularly for servers utilizing Ceph storage clusters. Successful exploitation could lead to data corruption or prolonged service outages, necessitating unscheduled maintenance and potential loss of data integrity during a crash.

Immediate Action: Apply the vendor-supplied kernel patches by updating to Linux kernel version 6.18.50, 7.2.4, or later versions where the fix is integrated.

Proactive Monitoring: Monitor system logs for kernel BUG entries, particularly those referencing fs/super.c or Ceph filesystem errors, which may indicate that this flaw is being triggered.

Compensating Controls: Limit access to the filesystem unmount commands to only authorized administrative users to prevent non-privileged actors from triggering the crash.

Public Exploit Available: No (exploit_available: false).

This vulnerability presents a clear risk to the stability of systems running the Ceph filesystem. Administrators should prioritize patching their production kernels to the specified fixed versions to ensure system uptime and prevent potential kernel panics. Failure to patch may result in avoidable service interruptions if a user or automated process triggers an unmount of the affected filesystem.