CVE-2026-89655

CVE-2026-89655 is a Use-After-Free (UAF) vulnerability in the Linux kernel's Ceph filesystem (ceph) module . The flaw occurs in __kick_flushing_caps(), which iterates over ci->i_cap_flush_list while temporarily dropping i_ceph_lock to send cap messages. During that unlock window, handle_cap_fl...