In the Linux kernel, the following vulnerability has been resolved:
bcache: fix cached_dev.sb_bio use-after-free and crash
In our production environment, we have received multiple crash reports regarding libceph, which have caught our attention:
``` [6888366.280350] Call Trace: [6888366.280452] blk_update_request+0x14e/0x370 [6888366.280561] blk_mq_end_request+0x1a/0x130 [6888366.280671] rbd_img_handle_request+0x1a0/0x1b0 [rbd] [6888366.280792] rbd_obj_handle_request+0x32/0x40 [rbd] [6888366.280903] __complete_request+0x22/0x70 [libceph] [6888366.281032] osd_dispatch+0x15e/0xb40 [libceph] [6888366.281164] ? inet_recvmsg+0x5b/0xd0 [6888366.281272] ? ceph_tcp_recvmsg+0x6f/0xa0 [libceph] [6888366.281405] ceph_con_process_message+0x79/0x140 [libceph] [6888366.281534] ceph_con_v1_try_read+0x5d7/0xf30 [libceph] [6888366.281661] ceph_con_workfn+0x329/0x680 [libceph] ```
After analyzing the coredump file, we found that the address of dc->sb_bio has been freed. We know that cached_dev is only freed when it is stopped.
Since sb_bio is a part of struct cached_dev, rather than an alloc every time. If the device is stopped while writing to the superblock, the released address will be accessed at endio.
This patch hopes to wait for sb_write to complete in cached_dev_free.
It should be noted that we analyzed the cause of the problem, then tell all details to the QWEN and adopted the modifications it made.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-debuginfoUpgrade perf-debuginfoUpgrade perfUpgrade kernel-tools-develUpgrade kernel-develUpgrade kernel-headersUpgrade kernel-livepatch-5.10.258-257.1041Upgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade bpftoolUpgrade kernel-toolsUpgrade kernel-livepatch-5.15.209-147.245Upgrade bpftool-debuginfoUpgrade python-perf-debuginfoUpgrade python-perf | Jun 23, 2026 | Jun 23, 2026 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Jul 5, 2026 | Jul 5, 2026 |
| Ubuntu | — | Upgrade linux-image-oracle-5.15Upgrade linux-image-virtual-hwe-26.04Upgrade linux-image-nvidia-tegraUpgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-gcp-fipsUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-nvidia-64kUpgrade linux-image-nvidia-5.15Upgrade linux-image-kvm-5.15Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-gke-64kUpgrade linux-image-generic-64k-5.15Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-azureUpgrade linux-image-aws-fipsUpgrade linux-image-5.15.0-1106-ibmUpgrade linux-image-ibm-classicUpgrade linux-image-realtime-5.15Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-7.0.0-1007-oracle-64kUpgrade linux-image-6.8.0-1030-nvidia-tegraUpgrade linux-image-5.15.0-1108-gkeUpgrade linux-image-xilinxUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-realtime-6.8.1Upgrade linux-image-gkeopUpgrade linux-image-realtime-64k-hwe-26.04Upgrade linux-image-ibm-6.8Upgrade linux-image-realtime-hwe-26.04Upgrade linux-image-raspiUpgrade linux-image-gcp-fips-5.15Upgrade linux-image-aws-64k-6.8Upgrade linux-image-nvidiaUpgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-1117-azure-fdeUpgrade linux-image-generic-64kUpgrade linux-image-generic-64k-6.8Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.15.0-186-generic-lpaeUpgrade linux-image-7.0.0-1013-nvidia-64kUpgrade linux-image-fipsUpgrade linux-image-oem-20.04dUpgrade linux-image-5.15.0-1117-azure-fipsUpgrade linux-image-nvidia-tegra-6.8Upgrade linux-image-7.0.0-1014-raspiUpgrade linux-image-azure-fde-7.0Upgrade linux-image-6.8.0-1061-aws-64kUpgrade linux-image-azure-fipsUpgrade linux-image-5.15.0-1106-raspiUpgrade linux-image-6.8.0-1058-oracle-64kUpgrade linux-image-6.8.0-1059-nvidia-64kUpgrade linux-image-azure-lts-24.04Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-raspi-realtimeUpgrade linux-image-oracle-64kUpgrade linux-image-virtual-6.8Upgrade linux-image-oem-22.04aUpgrade linux-image-ibmUpgrade linux-image-5.15.0-1104-kvmUpgrade linux-image-gkeop-6.8Upgrade linux-image-generic-6.8Upgrade linux-image-generic-64k-hwe-26.04Upgrade linux-image-genericUpgrade linux-image-aws-64k-7.0Upgrade linux-image-6.8.0-1059-gke-64kUpgrade linux-image-7.0.0-1007-gcpUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-aws-fips-5.15Upgrade linux-image-raspi-6.8Upgrade linux-image-5.15.0-1107-nvidiaUpgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-6.8.0-1046-gkeopUpgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-6.8.0-1058-oracleUpgrade linux-image-5.15.0-1112-awsUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-aws-6.8Upgrade linux-image-azure-fips-6.8Upgrade linux-image-intelUpgrade linux-image-gcp-64kUpgrade linux-image-6.8.0-1063-azure-fipsUpgrade linux-image-generic-64k-7.0Upgrade linux-image-generic-lpaeUpgrade linux-image-lowlatency-64kUpgrade linux-image-gke-6.8Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-intel-iotg-5.15Upgrade linux-image-6.8.0-1059-gkeUpgrade linux-image-lowlatencyUpgrade linux-image-7.0.0-27-generic-64kUpgrade linux-image-nvidia-64k-7.0Upgrade linux-image-nvidia-7.0Upgrade linux-image-5.15.0-1112-aws-64kUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-fips-6.8Upgrade linux-image-gke-5.15Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-7.0.0-1007-gcp-64kUpgrade linux-image-oem-20.04bUpgrade linux-image-oem-22.04Upgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-7.0.0-1013-nvidiaUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-5.15.0-1104-intel-iot-realtimeUpgrade linux-image-5.15.0-1064-nvidia-tegraUpgrade linux-image-6.8.0-1059-nvidia-lowlatencyUpgrade linux-image-7.0.0-27-realtime-64kUpgrade linux-image-7.0.0-1010-azureUpgrade linux-image-5.15.0-1111-realtimeUpgrade linux-image-virtual-5.15Upgrade linux-image-5.15.0-1112-gcp-fipsUpgrade linux-image-5.15.0-1112-aws-fipsUpgrade linux-image-xilinx-6.8Upgrade linux-image-6.8.0-1063-azureUpgrade linux-image-6.8.0-1059-nvidia-lowlatency-64kUpgrade linux-image-5.15.0-1064-nvidia-tegra-rtUpgrade linux-image-raspi-7.0Upgrade linux-image-raspi-nolpaeUpgrade linux-image-oracleUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-nvidia-6.8Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-5.15.0-186-generic-64kUpgrade linux-image-gcp-5.15Upgrade linux-image-gcpUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-5.15.0-1107-intel-iotgUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-oem-20.04Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-fips-5.15Upgrade linux-image-azure-cvmUpgrade linux-image-awsUpgrade linux-image-6.8.0-1064-gcp-64kUpgrade linux-image-6.8.0-1061-aws-fipsUpgrade linux-image-5.15.0-1075-xilinx-zynqmpUpgrade linux-image-aws-64k-5.15Upgrade linux-image-7.0.0-1014-raspi-realtimeUpgrade linux-image-7.0.0-1008-awsUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-oem-22.04bUpgrade linux-image-lowlatency-6.8Upgrade linux-image-gcp-7.0Upgrade linux-image-aws-7.0Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-aws-lts-24.04Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-6.8.0-1064-gcpUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-6.8.0-1061-ibmUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-lowlatency-5.15Upgrade linux-image-6.8.1-1056-realtimeUpgrade linux-image-gcp-6.8Upgrade linux-image-5.15.0-184-lowlatency-64kUpgrade linux-image-realtime-7.0Upgrade linux-image-realtime-64k-7.0Upgrade linux-image-oem-24.04bUpgrade linux-image-6.8.0-136-lowlatencyUpgrade linux-image-6.8.0-1064-gcp-fipsUpgrade linux-image-6.8.0-1033-xilinxUpgrade linux-image-gke-64k-6.8Upgrade linux-image-7.0.0-1008-aws-64kUpgrade linux-image-azure-fips-5.15Upgrade linux-image-nvidia-tegra-igxUpgrade linux-image-6.8.0-1061-awsUpgrade linux-image-gkeop-5.15Upgrade linux-image-aws-5.15Upgrade linux-image-7.0.0-28-generic-64kUpgrade linux-image-5.15.0-1095-gkeopUpgrade linux-image-5.15.0-1053-nvidia-tegra-igx-rtUpgrade linux-image-virtual-7.0Upgrade linux-image-raspi-5.15Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-oem-24.04Upgrade linux-image-nvidia-tegra-rt-6.8Upgrade linux-image-gkeUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-generic-5.15Upgrade linux-image-gcp-64k-7.0Upgrade linux-image-7.0.0-28-genericUpgrade linux-image-6.8.0-2050-raspi-realtimeUpgrade linux-image-6.8.0-136-generic-64kUpgrade linux-image-5.15.0-186-genericUpgrade linux-image-7.0.0-1009-azure-fdeUpgrade linux-image-oracle-64k-7.0Upgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-7.0.0-27-genericUpgrade linux-image-aws-fips-6.8Upgrade linux-image-6.8.0-136-fipsUpgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-realtimeUpgrade linux-image-oracle-6.8Upgrade linux-image-oem-24.04dUpgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-kvmUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-azure-5.15Upgrade linux-image-virtualUpgrade linux-image-5.15.0-186-fipsUpgrade linux-image-oem-22.04dUpgrade linux-image-generic-7.0Upgrade linux-image-azure-fde-6.8Upgrade linux-image-azure-fde-5.15Upgrade linux-image-azure-7.0Upgrade linux-image-azure-6.8Upgrade linux-image-7.0.0-27-realtimeUpgrade linux-image-6.8.0-136-lowlatency-64kUpgrade linux-image-5.15.0-184-lowlatencyUpgrade linux-image-5.15.0-1117-azureUpgrade linux-image-5.15.0-1053-nvidia-tegra-igxUpgrade linux-image-realtime-64kUpgrade linux-image-raspi-realtime-7.0Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-laptop-23.10Upgrade linux-image-ibm-5.15Upgrade linux-image-generic-lpae-5.15Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-generic-hwe-26.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-1059-nvidiaUpgrade linux-image-7.0.0-1007-oracleUpgrade linux-image-6.8.0-136-genericUpgrade linux-image-7.0.0-1009-ibmUpgrade linux-image-5.15.0-1109-oracleUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-oem-24.04cUpgrade linux-image-aws-64k | Jul 1, 2026 | Apr 24, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jun 15, 2026 | Apr 24, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub