In the Linux kernel, the following vulnerability has been resolved:
ceph: pass cred pointer to cephmdsauth_match()
This eliminates a redundant getcurrentcred() call, because cephmdscheck_access() has already obtained this pointer.
As a side effect, this also fixes a reference leak in cephmdsauthmatch(): by omitting the getcurrent_cred() call, no additional cred reference is taken.