CVE-2025-39927

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A race condition exists in the Ceph implementation within the Linux kernel related to validating the parent directory inode before applying state changes. Specifically, the issue arises when concurrent operations, such as rename operations, cause the r parent to become stale between the request initiation and reply processing. This can lead to state changes being applied to incorrect directory inodes. A related problem involves the incorrect handling of CEPH CAP PIN references when r parent is updated, leading to reference leaks and potential underflows. The fix involves adding validation to ensure the cached parent directory inode matches the directory information in MDS replies and correctly adjusting the CEPH CAP PIN reference when r parent is updated.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.