CVE-2026-52961

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A race condition exists in the Ceph component of the Linux kernel. The issue occurs because the required blob size computation was moved before the build xattrs() call. Since build xattrs() releases and reacquires the i ceph lock during its execution, the handle cap grant() function may update the i xattrs.blob with a newer blob provided by the Metadata Server (MDS) and increment the i xattrs.version. This leads to a stale blob size, which can trigger a kernel crash via a BUG ON in the ceph build xattrs blob() function.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.