Threats tagged 'ghsa-p5mp-qv23-7r77'

A vulnerability in the Linux kernel's Ceph filesystem component allowed improper validation of multi-filesystem (multifs) MDS authorization capabilities. Specifically, the MDS auth caps check did not validate the filesystem name (fsname) along with the associated capabilities, causing the authorization caps of one filesystem to be incorrectly applied to another. This flaw permitted users to gain elevated permissions on filesystems where they should have had restricted access, such as performing write operations on a read-only filesystem. The issue has been resolved by adding proper fsname validation in the authorization checks.