---
id: CVE-2024-53685
title: 'ceph: give up on paths longer than PATH_MAX'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  ceph: give up on paths longer than PATH_MAX

  If the full path to be built by ceph_mdsc_build_path() happens to be
  longer than PATH_MAX, then this function will enter an…
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= 9030aaf9bf0a1eee47a154c316c789e959638b0f <
    0f2b2d9e881c90402dbe28f9ba831775b7992e1f
  - >-
    Linux >= 9030aaf9bf0a1eee47a154c316c789e959638b0f <
    d42ad3f161a5a487f81915c406f46943c7187a0a
  - >-
    Linux >= 9030aaf9bf0a1eee47a154c316c789e959638b0f <
    e4b168c64da06954be5d520f6c16469b1cadc069
  - >-
    Linux >= 9030aaf9bf0a1eee47a154c316c789e959638b0f <
    c47ed91156daf328601d02b58d52d9804da54108
  - >-
    Linux >= 9030aaf9bf0a1eee47a154c316c789e959638b0f <
    99a37ab76a315c8307eb5b0dc095d8ad9d8efeaa
  - >-
    Linux >= 9030aaf9bf0a1eee47a154c316c789e959638b0f <
    550f7ca98ee028a606aa75705a7e77b1bd11720f
  - Linux 2.6.34
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-11-05T20:28:35.670533Z'
published: '2025-01-11'
updated: '2026-11-05'
sourceUpdated: '2026-11-05T20:31:23.567Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2024-53685'
references:
  - url: 'https://git.kernel.org/stable/c/0f2b2d9e881c90402dbe28f9ba831775b7992e1f'
  - url: 'https://git.kernel.org/stable/c/d42ad3f161a5a487f81915c406f46943c7187a0a'
  - url: 'https://git.kernel.org/stable/c/e4b168c64da06954be5d520f6c16469b1cadc069'
  - url: 'https://git.kernel.org/stable/c/c47ed91156daf328601d02b58d52d9804da54108'
  - url: 'https://git.kernel.org/stable/c/99a37ab76a315c8307eb5b0dc095d8ad9d8efeaa'
  - url: 'https://git.kernel.org/stable/c/550f7ca98ee028a606aa75705a7e77b1bd11720f'
tags:
  - cve.org
epss: 0.00231
epssPercentile: 0.14004
ingestedAt: '2026-11-05T22:38:31.832Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

ceph: give up on paths longer than PATH_MAX

If the full path to be built by ceph_mdsc_build_path() happens to be
longer than PATH_MAX, then this function will enter an endless (retry)
loop, effectively blocking the whole task.  Most of the machine
becomes unusable, making this a very simple and effective DoS
vulnerability.

I cannot imagine why this retry was ever implemented, but it seems
rather useless and harmful to me.  Let's remove it and fail with
ENAMETOOLONG instead.

## Affected

- `Linux >= 9030aaf9bf0a1eee47a154c316c789e959638b0f < 0f2b2d9e881c90402dbe28f9ba831775b7992e1f`
- `Linux >= 9030aaf9bf0a1eee47a154c316c789e959638b0f < d42ad3f161a5a487f81915c406f46943c7187a0a`
- `Linux >= 9030aaf9bf0a1eee47a154c316c789e959638b0f < e4b168c64da06954be5d520f6c16469b1cadc069`
- `Linux >= 9030aaf9bf0a1eee47a154c316c789e959638b0f < c47ed91156daf328601d02b58d52d9804da54108`
- `Linux >= 9030aaf9bf0a1eee47a154c316c789e959638b0f < 99a37ab76a315c8307eb5b0dc095d8ad9d8efeaa`
- `Linux >= 9030aaf9bf0a1eee47a154c316c789e959638b0f < 550f7ca98ee028a606aa75705a7e77b1bd11720f`
- `Linux 2.6.34`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.