01 Record

CVE-2026-80527

ceph: fix hanging __ceph_get_caps() with stale mds_wanted

HighPUBLISHEDCNA: Linux

CNA base score7.5 CVSS v3.xCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

View raw JSON

02 Description

ceph: fix hanging __ceph_get_caps() with stale mds_wanted

03 Exploitation and scoring

Exploitation

Assessed, none found. CISA's assessment recorded neither public exploit code nor evidence of exploitation when it was made.

SSVC decision

ExploitationnoneCISA recorded no public exploit code and no evidence of exploitation.
AutomatableyesAn attacker can reliably automate reconnaissance through exploitation, so this scales.
Technical ImpactpartialSuccessful exploitation gives limited control of the vulnerable component.

CISA publishes the decision points, not a final SSVC decision. The decision also depends on mission and well-being impact, which is a property of your deployment rather than of the vulnerability.

EPSS probability

0.50% probability of exploitation activity in the next 30 days.

EPSS percentile

Equal to or higher than the score of 42.6% of scored records. A rank, not a probability.

NVD base score

7.5 (CVSS v3.x), scored by the NVD independently of the CNA.

NVD CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

NVD analysis status

Received. NVD last modified this record on 2026-10-16.

Red Hat severity

Moderate. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2026-08-26 14:37Z2 MO AGO

Last updated

2026-10-16 19:26Z12 DAYS AGO

Reserved

2026-08-26

Assigning CNA

Linux

Record state

PUBLISHED

Severity

High (CVSS 7.5)

CNA CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weaknesses

CWE-367Time-of-check Time-of-use (TOCTOU) Race ConditionBase

Data version

5.2

Document digest

26a291a81d2c7c062407738e1d63208dd2635ea7b521b614e7c5e15b6139c94b

05 Affected products

VendorProductVersionsPlatforms

LinuxLinux0a454bdd501ad1aa30bb72e9581efa338ad6ce5c to < b5661524c5a45085a866864ca9b8ae2513dfd67a, 0a454bdd501ad1aa30bb72e9581efa338ad6ce5c to < 5e84bc6f67e19fdd192d8b215de728acbfc12572, 0a454bdd501ad1aa30bb72e9581efa338ad6ce5c to < 5fedf279a1ea369d39c8b06dd4547cdc576065d0, 0a454bdd501ad1aa30bb72e9581efa338ad6ce5c to < e05c315b4da0c16ea800ee4b2cb6c617f586d1b5, 0a454bdd501ad1aa30bb72e9581efa338ad6ce5c to < fcce1b3be6d286aa80831e730289f4c062053ae6, 0a454bdd501ad1aa30bb72e9581efa338ad6ce5c to < a3bc6b3e9ef3f5f5cb85a902a30a090c7931127c, 0a454bdd501ad1aa30bb72e9581efa338ad6ce5c to < 9e55fe24c548ad3163903eb58bb002d28d32a630, 0a454bdd501ad1aa30bb72e9581efa338ad6ce5c to < 50958bb928bad3bdba9e5d1b7ff4bbadcf6951e6, 5.8—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/b5661524c5a45085a866864ca9b8ae2513dfd67a
git.kernel.orghttps://git.kernel.org/stable/c/5e84bc6f67e19fdd192d8b215de728acbfc12572
git.kernel.orghttps://git.kernel.org/stable/c/5fedf279a1ea369d39c8b06dd4547cdc576065d0
git.kernel.orghttps://git.kernel.org/stable/c/e05c315b4da0c16ea800ee4b2cb6c617f586d1b5
git.kernel.orghttps://git.kernel.org/stable/c/fcce1b3be6d286aa80831e730289f4c062053ae6
git.kernel.orghttps://git.kernel.org/stable/c/a3bc6b3e9ef3f5f5cb85a902a30a090c7931127c
git.kernel.orghttps://git.kernel.org/stable/c/9e55fe24c548ad3163903eb58bb002d28d32a630
git.kernel.orghttps://git.kernel.org/stable/c/50958bb928bad3bdba9e5d1b7ff4bbadcf6951e6

07 Fixed in

Debian 12

linux
Fixed in 6.1.187-1
linux-6.12
Fixed in 6.12.107-1~deb12u1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 13

linux
Fixed in 6.12.105-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 14

linux
Fixed in 7.1.10-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.