CVE-2023-52732
A critical flaw in the Linux kernel's Ceph client (kclient) could allow an attacker to cause memory corruption or incorrect data access when the client receives a corrupted snapshot trace from the MDS. The vulnerability has been resolved by a patch that blocks further I/O and metadata requests and evicts the kclient to prevent potential exploitation. Applying the kernel patch eliminates the risk.
An official fix is available, so this entry is kept for 30 days and then removed automatically.
Who is affected
Linux kernel users, particularly those using the Ceph filesystem client.
Real-world impact
An attacker who can send a corrupted snap trace could potentially cause denial of service, data corruption, or arbitrary code execution with high impact on confidentiality, integrity, and availability.
Why this severity
CVSS v3.1 base score 9.8 (Critical) due to network‑adjacent attack vector, low attack complexity, no privileges or user interaction required, and high impact on confidentiality, integrity, and availability.
What to do about it
- 01Obtain the Linux kernel patch that resolves CVE-2023-52732 as referenced in the NVD description.
- 02Apply the patch to the affected kernel version.
- 03Reboot the system to load the patched kernel.
NVD description indicating the vulnerability has been resolved in the Linux kernel.
Timeline
- May 21, 2024 · May 21, 2024PublishedDisclosed and added to the National Vulnerability Database.
- Aug 4, 2026 · 2d agoAdvisory updatedThe NVD record was last revised.
- Aug 5, 2026 · 1d agoOfficial fix availableA vendor patch or mitigation now exists — see the remediation steps above.