CVE-2024-53685: 
Linux Kernel vulnerability analysis and mitigation

CVE-2024-53685 affects the Linux kernel's Ceph filesystem implementation. The vulnerability was discovered in the ceph_mdsc_build_path() function, where paths longer than PATH_MAX trigger an endless retry loop. This vulnerability was reported by Dario Weißer and was patched in December 2024 (Kernel Git).

The vulnerability exists in the ceph_mdsc_build_path() function of the Linux kernel's Ceph filesystem implementation. When attempting to build a path longer than PATH_MAX, the function enters an endless retry loop instead of properly handling the error condition. The implementation contained a retry mechanism that would continuously attempt to rebuild the path, creating an infinite loop (Kernel Git).

When exploited, this vulnerability effectively blocks the entire task, causing most of the machine to become unusable. This results in a denial of service (DoS) condition that significantly impacts system availability (Kernel Git).

The issue has been fixed by removing the retry mechanism and instead returning an ENAMETOOLONG error when paths exceed PATH_MAX. The fix has been backported to multiple kernel versions including 6.1.x series. Users should update to patched kernel versions that include the fix (Debian LTS).