EUVD-2026-76567

In the Linux kernel, the following vulnerability has been resolved: ceph: fix UAF in kickflushingcaps on cf entry freed during unlock listforeachentry iterates ci-icapflushlist but drops icephlock to send cap messages. During the unlock window, handlecapflushack can acquire icephlock, detach cf...

CVE-2026-89655

CVE-2026-89655 is a Use-After-Free (UAF) vulnerability in the Linux kernel's Ceph filesystem (ceph) module . The flaw occurs in __kick_flushing_caps(), which iterates over ci->i_cap_flush_list while temporarily dropping i_ceph_lock to send cap messages. During that unlock window, handle_cap_fl...

PT-2026-90371

In the Linux kernel, the following vulnerability has been resolved: ceph: fix UAF in kick flushing caps on cf entry freed during unlock list for each entry iterates ci-i cap flush list but drops i ceph lock to send cap messages. During the unlock window, handle cap flush ack can acquire i ceph...