CVE-2024-56564: 
Linux Kernel vulnerability analysis and mitigation

CVE-2024-56564 addresses a reference leak vulnerability in the Linux kernel's Ceph filesystem implementation. The issue was discovered in the cephmdsauthmatch() function, where a redundant getcurrent_cred() call resulted in an unnecessary credential reference being taken (Kernel Git).

The vulnerability stems from a redundant credential pointer acquisition in the cephmdsauthmatch() function. The function was making an unnecessary getcurrentcred() call despite cephmdscheckaccess() already having obtained the required credential pointer. This implementation resulted in taking an additional, unneeded credential reference (Kernel Git).

The vulnerability causes a reference leak in the Linux kernel's Ceph filesystem implementation, which could potentially lead to resource management issues over time (NVD).

The vulnerability has been patched by modifying the cephmdsauthmatch() function to accept the credential pointer as a parameter instead of calling getcurrent_cred(). This fix eliminates the redundant credential reference acquisition and resolves the reference leak (Kernel Git).