CVE-2026-89653

This vulnerability affects the Linux kernel's Ceph filesystem (ceph) MDSMap decode path . The check_new_map() function uses monitor-controlled export_targets entries as bit numbers in a fixed stack bitmap. A rank value at or above CEPH_MAX_MDS causes set_bit() to write past the end of the array, ...

PT-2026-90371

In the Linux kernel, the following vulnerability has been resolved: ceph: fix UAF in kick flushing caps on cf entry freed during unlock list for each entry iterates ci-i cap flush list but drops i ceph lock to send cap messages. During the unlock window, handle cap flush ack can acquire i ceph...