CVE-2026-89654

In the Linux kernel, the following vulnerability has been resolved: ceph: fix UAF in checknewmap on session freed during unlock checknewmap iterates mdsc-sessions and for each active session drops mdsc-mutex to perform per-session operations. The forced-close path rank removed from map correctly...

CVE-2026-89654

CVE-2026-89654 is a Use-After-Free (UAF) in the Linux kernel's Ceph filesystem (ceph), specifically in check_new_map(). Three code paths—address changed, reconnect, and active transition—drop mdsc->mutex without acquiring an additional reference on the MDS session object. During the unlock win...

CVE-2026-89654 ceph: fix UAF in check_new_map() on session freed during unlock

In the Linux kernel, the following vulnerability has been resolved: ceph: fix UAF in checknewmap on session freed during unlock checknewmap iterates mdsc-sessions and for each active session drops mdsc-mutex to perform per-session operations. The forced-close path rank removed from map correctly...

EUVD-2026-76566

In the Linux kernel, the following vulnerability has been resolved: ceph: fix UAF in checknewmap on session freed during unlock checknewmap iterates mdsc-sessions and for each active session drops mdsc-mutex to perform per-session operations. The forced-close path rank removed from map correctly...