CVE-2023-53867

CVE-2023-53867 is a Linux kernel vulnerability in the Ceph subsystem where a use-after-free can occur when trimming caps (ceph_iterate_session_caps). The root cause is that a cap may be removed by another thread after session->s_cap_lock is released, leading to callbacks using stale memory. Th...