In the Linux kernel, the following vulnerability has been resolved: ceph: pass cred pointer to cephmdsauthmatch() This eliminates a redundant getcurrentcred() call, because cephmdscheckaccess() has already obtained this pointer. As a side effect, this also fixes a reference leak in cephmdsauthmatch(): by omitting the getcurrent_cred() call, no additional cred reference is taken.