CVE-2023-52636

In the Linux kernel, the following vulnerability has been resolved: libceph: just wait for more data to be available on the socket A short read may occur while reading the message footer from the socket. Later, when the socket is ready for another read, the messenger invokes all read_partial_*() handlers, including read_partial_sparse_msg_data(). The expectation is that read_partial_sparse_msg_data() would bail, allowing the messenger to invoke read_partial() for the footer and pick up where it left off. However read_partial_sparse_msg_data() violates that and ends up calling into the state machine in the OSD client. The sparse-read state machine assumes that it's a new op and interprets some piece of the footer as the sparse-read header and returns bogus extents/data length, etc. To determine whether read_partial_sparse_msg_data() should bail, let's reuse cursor->total_resid. Because once it reaches to zero that means all the extents and data have been successfully received in last read, else it could break out when partially reading any of the extents and data. And then osd_sparse_read() could continue where it left off. [ idryomov: changelog ]

• https://git.kernel.org/stable/c/8e46a2d068c92a905d01cbb018b00d66991585abPatch
• https://git.kernel.org/stable/c/bd9442e553ab8bf74b8be3b3c0a43bf4af4dc9b8Patch
• https://git.kernel.org/stable/c/da9c33a70f095d5d55c36d0bfeba969e31de08aePatch
• https://git.kernel.org/stable/c/8e46a2d068c92a905d01cbb018b00d66991585abPatch
• https://git.kernel.org/stable/c/bd9442e553ab8bf74b8be3b3c0a43bf4af4dc9b8Patch
• https://git.kernel.org/stable/c/da9c33a70f095d5d55c36d0bfeba969e31de08aePatch

Published

Apr 2, 2024

Last Modified

Aug 4, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-52630Rejected reason: This CVE ID has been rejected or withdrawn …
• CVE-2023-52631In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2023-52632In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2023-52633In the Linux kernel, the following vulnerability has been re…5
• CVE-2023-52634In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2023-52635In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2023-52637In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2023-52638In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2023-52639In the Linux kernel, the following vulnerability has been re…4.7
• CVE-2023-5264A vulnerability classified as critical was found in huakecms…7.2
• CVE-2023-52640In the Linux kernel, the following vulnerability has been re…7.1
• CVE-2023-52641In the Linux kernel, the following vulnerability has been re…5.5