CVE-2026-68153: libceph: remove debugfs files before client teardown
In the Linux kernel, the following vulnerability has been resolved:
libceph: remove debugfs files before client teardown
cephdestroyclient() tears down the monitor client before removing the per-client debugfs files. A concurrent read of the monmap debugfs file can enter monmapshow() after cephmoncstop() has freed monc->monmap, triggering a use-after-free.
Remove the debugfs files before stopping the OSD and monitor clients. debugfsremove() drains active handlers and prevents new accesses, so the debugfs callbacks can no longer race the rest of client teardown.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-68153?
CVE-2026-68153 has a risk level of 34, indicating a moderate severity vulnerability.
What type of vulnerability is CVE-2026-68153?
CVE-2026-68153 is classified as a Use After Free vulnerability in the Linux kernel.
How do I fix CVE-2026-68153?
To fix CVE-2026-68153, ensure you are running the latest patched version of the Linux kernel that addresses this issue.
What components are affected by CVE-2026-68153?
CVE-2026-68153 affects the libceph component within the Linux kernel.
When was CVE-2026-68153 published?
CVE-2026-68153 was published on August 10, 2026.