In the Linux kernel, the following vulnerability has been resolved:
libceph: fix race between delayed_work() and ceph_monc_stop()
The way the delayed work is handled in ceph_monc_stop() is prone to races with mon_fault() and possibly also finish_hunting(). Both of these can requeue the delayed work which wouldn't be canceled by any of the following code in case that happens after cancel_delayed_work_sync() runs -- __close_session() doesn't mess with the delayed work in order to avoid interfering with the hunting interval logic. This part was missed in commit b5d91704f53e ("libceph: behave in mon_fault() if cur_mon < 0") and use-after-free can still ensue on monc and objects that hang off of it, with monc->auth and monc->monmap being particularly susceptible to quickly being reused.
To fix this:
- clear monc->cur_mon and monc->hunting as part of closing the session in ceph_monc_stop() - bail from delayed_work() if monc->cur_mon is cleared, similar to how it's done in mon_fault() and finish_hunting() (based on monc->hunting) - call cancel_delayed_work_sync() after the session is closed
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-5.10.223-211.872Upgrade bpftoolUpgrade kernel-develUpgrade kernel-livepatch-5.15.164-108.161Upgrade kernel-toolsUpgrade kernel-livepatch-4.14.352-267.564Upgrade kernel-tools-debuginfoUpgrade perfUpgrade kernel-headersUpgrade python-perf-debuginfoUpgrade perf-debuginfoUpgrade python-perfUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-develUpgrade bpftool-debuginfo | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade bpftool-debuginfoUpgrade kernel-libbpf-staticUpgrade perf-debuginfoUpgrade kernel-libbpf-develUpgrade kernelUpgrade kernel-modules-extra-commonUpgrade kernel-headersUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade bpftoolUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-debuginfoUpgrade kernel-libbpfUpgrade kernel-develUpgrade kernel-tools-develUpgrade python3-perfUpgrade python3-perf-debuginfoUpgrade perfUpgrade kernel-modules-extraUpgrade kernel-livepatch-6.1.102-108.177Upgrade kernel-debuginfo | Sep 16, 2025 | Aug 7, 2024 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Aug 14, 2024 | Aug 7, 2024 |
| Dell Powerstore Dsa2025086 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Feb 20, 2025 |
| Huawei Euleros 2_0_sp10 | — | Upgrade python3-perfUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-toolsUpgrade kernel-abi-stablelists | Nov 11, 2024 | Aug 7, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-abi-stablelistsUpgrade kernel-tools | Oct 9, 2024 | Aug 7, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernelUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade kernel-tools-libs | Nov 26, 2024 | Aug 7, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade kernelUpgrade python3-perfUpgrade kernel-tools-libs | Nov 11, 2024 | Aug 7, 2024 |
| Oracle_linux | — | Upgrade kernel-uek | Oct 16, 2024 | Aug 7, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Aug 7, 2024 |
| Suse | — | Upgrade dtb-hisiliconUpgrade kernel-trace-baseUpgrade kernel-xen-develUpgrade kernel-default-optionalUpgrade dtb-amdUpgrade kernel-64kb-develUpgrade kernel-syms-azureUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-develUpgrade kernel-kvmsmall-develUpgrade kernel-azure-extraUpgrade kernel-64kb-livepatch-develUpgrade kernel-symsUpgrade dtb-lgUpgrade ocfs2-kmp-rtUpgrade dtb-alteraUpgrade dtb-freescaleUpgrade ocfs2-kmp-64kbUpgrade kernel-xenUpgrade kernel-ec2Upgrade kernel-sourceUpgrade dtb-amlogicUpgrade kernel-zfcpdumpUpgrade kernel-devel-azureUpgrade dlm-kmp-64kbUpgrade cluster-md-kmp-defaultUpgrade kernel-debugUpgrade dtb-xilinxUpgrade reiserfs-kmp-rtUpgrade kernel-obs-qaUpgrade kernel-azure-optionalUpgrade dtb-exynosUpgrade dtb-renesasUpgrade kselftests-kmp-64kbUpgrade kernel-traceUpgrade kernel-default-extraUpgrade ocfs2-kmp-azureUpgrade kernel-rt_debugUpgrade kernel-source-azureUpgrade kernel-azure-baseUpgrade gfs2-kmp-64kbUpgrade kernel-docs-htmlUpgrade dtb-apmUpgrade kernel-macrosUpgrade kernel-default-develUpgrade reiserfs-kmp-defaultUpgrade kernel-debug-livepatch-develUpgrade kernel-trace-develUpgrade dtb-mediatekUpgrade kernel-64kbUpgrade kernel-64kb-optionalUpgrade kernel-devel-rtUpgrade kernel-xen-baseUpgrade cluster-md-kmp-rtUpgrade dtb-broadcomUpgrade kernel-default-livepatch-develUpgrade cluster-md-kmp-azureUpgrade dtb-amazonUpgrade gfs2-kmp-rtUpgrade kernel-kvmsmallUpgrade dtb-appleUpgrade kernel-debug-develUpgrade kernel-default-livepatchUpgrade dtb-socionextUpgrade dtb-marvellUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt_debug-develUpgrade kernel-rtUpgrade kernel-ec2-develUpgrade dlm-kmp-rtUpgrade kernel-docsUpgrade kernel-preemptUpgrade kselftests-kmp-azureUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-azureUpgrade kselftests-kmp-defaultUpgrade kernel-default-vdsoUpgrade kernel-rt-optionalUpgrade gfs2-kmp-azureUpgrade kernel-rt-vdsoUpgrade dtb-caviumUpgrade kernel-azure-develUpgrade kernel-default-base-rebuildUpgrade dtb-sprdUpgrade dtb-armUpgrade kselftests-kmp-rtUpgrade kernel-rt-livepatchUpgrade kernel-default-baseUpgrade kernel-debug-vdsoUpgrade kernel-obs-buildUpgrade kernel-ec2-baseUpgrade kernel-default-manUpgrade dtb-rockchipUpgrade dtb-qcomUpgrade dlm-kmp-defaultUpgrade cluster-md-kmp-64kbUpgrade kernel-rt-livepatch-develUpgrade kernel-source-vanillaUpgrade kernel-rt-develUpgrade kernel-azure-vdsoUpgrade kernel-64kb-extraUpgrade kernel-source-rtUpgrade reiserfs-kmp-64kbUpgrade kernel-kvmsmall-vdsoUpgrade dtb-allwinnerUpgrade kernel-defaultUpgrade kernel-rt-extraUpgrade reiserfs-kmp-azureUpgrade dlm-kmp-azureUpgrade ocfs2-kmp-defaultUpgrade kernel-preempt-develUpgrade kernel-azure-livepatch-develUpgrade gfs2-kmp-defaultUpgrade dtb-nvidiaUpgrade kernel-syms-rt | Dec 5, 2025 | Sep 10, 2024 |
| Ubuntu | — | Upgrade linux-image-kvmUpgrade linux-image-5.15.0-1066-gkeUpgrade linux-image-oem-22.04dUpgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-5.4.0-1051-xilinx-zynqmpUpgrade linux-image-azure-fdeUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-6.8.0-1017-azureUpgrade linux-image-azure-cvmUpgrade linux-image-5.4.0-1136-gcpUpgrade linux-image-raspi2Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.8.0-1014-raspiUpgrade linux-image-aws-lts-22.04Upgrade linux-image-6.8.0-1017-nvidia-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-6.8.0-48-genericUpgrade linux-image-6.8.0-1016-azureUpgrade linux-image-5.4.0-195-lowlatencyUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-1067-oracleUpgrade linux-image-6.8.0-1017-azure-fdeUpgrade linux-image-5.15.0-121-lowlatency-64kUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1016-oemUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-oem-20.04dUpgrade linux-image-5.15.0-1064-intel-iotgUpgrade linux-image-5.15.0-1064-nvidia-lowlatencyUpgrade linux-image-oem-22.04bUpgrade linux-image-oracleUpgrade linux-image-aws-lts-20.04Upgrade linux-image-6.8.0-1018-awsUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-121-generic-lpaeUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.8.0-1015-oracle-64kUpgrade linux-image-bluefieldUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.15.0-1052-gkeopUpgrade linux-image-6.8.0-1017-nvidia-lowlatency-64kUpgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-1017-nvidia-lowlatencyUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-5.15.0-1064-nvidiaUpgrade linux-image-5.4.0-1120-kvmUpgrade linux-image-awsUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-gke-5.15Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-oemUpgrade linux-image-oem-osp1Upgrade linux-image-generic-64kUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-nvidia-64kUpgrade linux-image-5.15.0-1062-raspiUpgrade linux-image-6.8.0-1015-oracleUpgrade linux-image-6.8.0-48-generic-64kUpgrade linux-image-5.4.0-1043-iotUpgrade linux-image-5.4.0-1116-raspiUpgrade linux-image-gcpUpgrade linux-image-5.4.0-1132-awsUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.15.0-121-lowlatencyUpgrade linux-image-6.8.0-1016-gcpUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-5.4.0-1137-azureUpgrade linux-image-genericUpgrade linux-image-oem-22.04cUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.15.0-1062-ibmUpgrade linux-image-5.4.0-1131-oracleUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.4.0-1092-bluefieldUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-intel-iotgUpgrade linux-image-6.8.0-1017-gcpUpgrade linux-image-azure-lts-20.04Upgrade linux-image-6.8.0-1014-ibmUpgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-gkeUpgrade linux-image-5.15.0-1066-kvmUpgrade linux-image-oem-20.04bUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-azureUpgrade linux-image-6.8.0-48-lowlatency-64kUpgrade linux-image-5.4.0-195-generic-lpaeUpgrade linux-image-5.4.0-1099-gkeopUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.4.0-195-genericUpgrade linux-image-azure-lts-22.04Upgrade linux-image-gkeop-5.4Upgrade linux-image-oem-22.04Upgrade linux-image-5.15.0-1069-awsUpgrade linux-image-5.4.0-1079-ibmUpgrade linux-image-oem-24.04aUpgrade linux-image-6.8.0-1016-azure-fdeUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-oem-20.04Upgrade linux-image-gkeopUpgrade linux-image-oem-20.04cUpgrade linux-image-virtualUpgrade linux-image-5.15.0-1068-gcpUpgrade linux-image-raspi2-hwe-18.04Upgrade linux-image-5.15.0-121-generic-64kUpgrade linux-image-gkeop-6.8Upgrade linux-image-nvidiaUpgrade linux-image-oem-24.04Upgrade linux-image-6.8.0-1017-nvidiaUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-ibmUpgrade linux-image-intelUpgrade linux-image-6.8.0-48-lowlatencyUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-1013-gkeUpgrade linux-image-raspiUpgrade linux-image-oem-22.04aUpgrade linux-image-5.15.0-121-genericUpgrade linux-image-generic-lpaeUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.15.0-1072-azureUpgrade linux-image-lowlatencyUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-5.15.0-1072-azure-fdeUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-oracle-64kUpgrade linux-image-nvidia-6.8Upgrade linux-image-snapdragon-hwe-18.04 | Sep 13, 2024 | Aug 7, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 7, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub