3 matches found
EUVD-2026-5844
In the Linux kernel, the following vulnerability has been resolved: ceph: fix oops due to invalid pointer for kfree in parselongname This fixes a kernel oops when reading ceph snapshot directories .snap, for example by simply running ls /mnt/myceph/.snap. The variable str is guarded by freekfree,...
CVE-2025-68285
CVE-2025-68285 (libceph UAF in ceph map handling) – Summary : The Linux kernel fix addresses a use-after-free race in libceph during session establishment. The issue occurred when waiting for a new monmap/osdmap could race with a still-active map update, allowing dereferencing of freed map data (...
CVE-2025-39879 ceph: always call ceph_shift_unused_folios_left()
In the Linux kernel, the following vulnerability has been resolved: ceph: always call cephshiftunusedfoliosleft The function cephprocessfoliobatch sets foliobatch entries to NULL, which is an illegal state. Before foliobatchrelease crashes due to this API violation, the function...