CVE-2026-64112

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A TOCTOU (Time-of-Check to Time-of-Use) race condition exists in the RBD (RADOS Block Device) module during the unmapping of an image. The issue occurs because lock dwork can be requeued by the maybe kick acquire() function immediately after it has been canceled. This can lead to rbd acquire lock() executing after rbd dev device release() and rbd dev image release() have already freed or reset system resources. Consequently, this may cause a failure in the rbd assert(rbd image format valid(rbd dev->image format)) check within the rbd dev header info() function, which is triggered via rbd dev refresh() from rbd post acquire action().

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.