CVE-2026-89990

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A use-after-free issue exists in the Ceph component of the Linux kernel. The ceph mds check access() function traverses the mdsc->s cap auths array without holding the mdsc->mutex. If a concurrent session reopen occurs, the mdsc->mutex is used to replace the array and free the previous array and its strings while ceph mds check access() is still inspecting it, leading to a kernel paging request failure.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.