CVE-2026-89654

CVE-2026-89654 is a Use-After-Free (UAF) in the Linux kernel's Ceph filesystem (ceph), specifically in check_new_map(). Three code paths—address changed, reconnect, and active transition—drop mdsc->mutex without acquiring an additional reference on the MDS session object. During the unlock win...