UBUNTU-CVE-2026-89651

In the Linux kernel, the following vulnerability has been resolved: ceph: bound MDSCapAuth path and fsname decode in handlesession handlesession decodes the MDSCapAuth records carried by a CEPHSESSIONOPEN message msgversion = 6. For each record the match.path and match.fsname byte strings are rea...

CVE-2026-89647

In the Linux kernel, the following vulnerability has been resolved: ceph: do not repeat cephtrimdentries if no progress possible cephcapreclaimwork re-queues itself for as long as cephtrimdentries returns -EAGAIN, which happens whenever a lease walk exhausts its nrtoscan budget. This creates a bu...

CVE-2026-89653

A vulnerability in the Linux kernel's Ceph filesystem allows an out-of-bounds write during MDSMap decoding. The MDSMap export_targets entries are monitor-controlled , and the check_new_map() function uses each entry as a bit number in a fixed stack bitmap. A rank value ≥ CEPH_MAX_MDS causes set_b...

PT-2026-90371

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A Use-After-Free UAF issue exists in the ceph component of the Linux kernel. The kick flushing caps function iterates through the ci-i cap flush list using list for each entry but releas...