---
id: CVE-2026-43419
title: 'ceph: fix memory leaks in ceph_mdsc_build_path()'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  ceph: fix memory leaks in ceph_mdsc_build_path()

  Add __putname() calls to error code paths that did not free the "path"
  pointer obtained by __getname().  If ownership …
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= e4b168c64da06954be5d520f6c16469b1cadc069 <
    d39366c169f873edc8ad21fdf6bf08d1de603dbb
  - >-
    Linux >= 3fd945a79e147ee10f84213976889b29049c3519 <
    657dc653b06a3cc0282aea447a3f137fa94066a4
  - >-
    Linux >= 3fd945a79e147ee10f84213976889b29049c3519 <
    5895d0164c84d7fec6abc198920c257f55c51899
  - >-
    Linux >= 3fd945a79e147ee10f84213976889b29049c3519 <
    097cd68f46686391a98f2618188f0cb7b7570de2
  - >-
    Linux >= 3fd945a79e147ee10f84213976889b29049c3519 <
    13b8b9d6f59ef17fb96c298c3a0d62a8306950cc
  - >-
    Linux >= 3fd945a79e147ee10f84213976889b29049c3519 <
    040d159a45ded7f33201421a81df0aa2a86e5a0b
  - Linux 0f2b2d9e881c90402dbe28f9ba831775b7992e1f
  - Linux d42ad3f161a5a487f81915c406f46943c7187a0a
  - Linux >= 6.1.125 < 6.1.191
  - Linux >= 5.10.234 < 5.11
  - Linux >= 5.15.177 < 5.16
  - Linux 6.6
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-11-06T15:37:53.765142Z'
published: '2026-05-08'
updated: '2026-11-06'
sourceUpdated: '2026-11-06T15:42:52.752Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-43419'
references:
  - url: 'https://git.kernel.org/stable/c/d39366c169f873edc8ad21fdf6bf08d1de603dbb'
  - url: 'https://git.kernel.org/stable/c/657dc653b06a3cc0282aea447a3f137fa94066a4'
  - url: 'https://git.kernel.org/stable/c/5895d0164c84d7fec6abc198920c257f55c51899'
  - url: 'https://git.kernel.org/stable/c/097cd68f46686391a98f2618188f0cb7b7570de2'
  - url: 'https://git.kernel.org/stable/c/13b8b9d6f59ef17fb96c298c3a0d62a8306950cc'
  - url: 'https://git.kernel.org/stable/c/040d159a45ded7f33201421a81df0aa2a86e5a0b'
tags:
  - cve.org
epss: 0.00123
epssPercentile: 0.02037
ingestedAt: '2026-11-05T15:02:32.291Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

ceph: fix memory leaks in ceph_mdsc_build_path()

Add __putname() calls to error code paths that did not free the "path"
pointer obtained by __getname().  If ownership of this pointer is not
passed to the caller via path_info.path, the function must free it
before returning.

## Affected

- `Linux >= e4b168c64da06954be5d520f6c16469b1cadc069 < d39366c169f873edc8ad21fdf6bf08d1de603dbb`
- `Linux >= 3fd945a79e147ee10f84213976889b29049c3519 < 657dc653b06a3cc0282aea447a3f137fa94066a4`
- `Linux >= 3fd945a79e147ee10f84213976889b29049c3519 < 5895d0164c84d7fec6abc198920c257f55c51899`
- `Linux >= 3fd945a79e147ee10f84213976889b29049c3519 < 097cd68f46686391a98f2618188f0cb7b7570de2`
- `Linux >= 3fd945a79e147ee10f84213976889b29049c3519 < 13b8b9d6f59ef17fb96c298c3a0d62a8306950cc`
- `Linux >= 3fd945a79e147ee10f84213976889b29049c3519 < 040d159a45ded7f33201421a81df0aa2a86e5a0b`
- `Linux 0f2b2d9e881c90402dbe28f9ba831775b7992e1f`
- `Linux d42ad3f161a5a487f81915c406f46943c7187a0a`
- `Linux >= 6.1.125 < 6.1.191`
- `Linux >= 5.10.234 < 5.11`
- `Linux >= 5.15.177 < 5.16`
- `Linux 6.6`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.