SECUFOCUSNOW
Home›CVE index›CVE-2026-80527
ReviewHigh

CVE-2026-80527

Linux

In the Linux kernel, the following vulnerability has been resolved: ceph: fix hanging __ceph_get_caps() with stale mds_wanted A reader can hang forever in __ceph_get_caps() when the client no longer holds `FILE_RD`, but local cap state still says that the capability is already wanted (via `mds_wanted`). One way to trigger this is through MDS cap revocation. If another client performs a conflicting operation, the MDS can revoke `FILE_RD` from the reader; the next read then has to reacquire `FILE_RD`. If the cap update that should request `FILE_RD` never reaches the MDS after `cap->mds_wanted...

CVSS
7.5
EPSS
-
- percentile
CISA KEV
Not listed
Published
2026.08.27
PRIORITY ASSESSMENT

Review

The CVSS severity warrants an early asset and exposure review.

Known exploitationNot established by KEV
Exploit probability-
Technical severityCVSS 7.5

Vulnerability overview

In the Linux kernel, the following vulnerability has been resolved: ceph: fix hanging __ceph_get_caps() with stale mds_wanted A reader can hang forever in __ceph_get_caps() when the client no longer holds `FILE_RD`, but local cap state still says that the capability is already wanted (via `mds_wanted`). One way to trigger this is through MDS cap revocation. If another client performs a conflicting operation, the MDS can revoke `FILE_RD` from the reader; the next read then has to reacquire `FILE_RD`. If the cap update that should request `FILE_RD` never reaches the MDS after `cap->mds_wanted...

Affected product and versions

Product
Linux
Affected versions
>= 0a454bdd501ad1aa30bb72e9581efa338ad6ce5c < b5661524c5a45085a866864ca9b8ae2513dfd67a, >= 0a454bdd501ad1aa30bb72e9581efa338ad6ce5c < 5e84bc6f67e19fdd192d8b215de728acbfc12572, >= 0a454bdd501ad1aa30bb72e9581efa338ad6ce5c < 5fedf279a1ea369d39c8b06dd4547cdc576065d0, >= 0a454bdd501ad1aa30bb72e9581efa338ad6ce5c < e05c315b4da0c16ea800ee4b2cb6c617f586d1b5, >= 0a454bdd501ad1aa30bb72e9581efa338ad6ce5c < fcce1b3be6d286aa80831e730289f4c062053ae6, >= 0a454bdd501ad1aa30bb72e9581efa338ad6ce5c < a3bc6b3e9ef3f5f5cb85a902a30a090c7931127c, >= 0a454bdd501ad1aa30bb72e9581efa338ad6ce5c < 9e55fe24c548ad3163903eb58bb002d28d32a630, >= 0a454bdd501ad1aa30bb72e9581efa338ad6ce5c < 50958bb928bad3bdba9e5d1b7ff4bbadcf6951e6, >= 5.8
Fixed versions
No verified fixed-version field is available yet

Recommended response sequence

Confirm exposure before applying a vendor-supported change.

Full remediation guide
  1. 1
    Identify

    Confirm that Linux and an affected version are present.

  2. 2
    Prioritize

    Combine exploitation signals with asset exposure and business criticality.

  3. 3
    Remediate

    Follow the vendor advisory or supported update path and preserve rollback options.

  4. 4
    Verify

    Recheck the version, service health, access paths, and relevant logs.

Technical data

CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE
Not available