Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
5.5

Linux kernel crash in Ceph storage handling

CVE-2026-52961 · published 4 months ago
Summary

The Linux kernel used in several Canonical distributions can crash when Ceph storage tries to process certain metadata, due to a miscalculated size. This leads to a system halt that affects services running on those servers. Apply the latest kernel updates from Canonical, which contain the fix, and restart the affected machines.

What to do
  • Update canonical linux-aws-6.8 to version 6.8.0-1061.64~22.04.1.
  • Update canonical linux-azure-6.8 to version 6.8.0-1063.71~22.04.1.
  • Update canonical linux-azure-fde-6.8 to version 6.8.0-1062.69~22.04.1.
  • Update canonical linux-gcp-6.8 to version 6.8.0-1064.72~22.04.1.
  • Update canonical linux-hwe-6.8 to version 6.8.0-136.136~22.04.1.
  • Update canonical linux-ibm-6.8 to version 6.8.0-1061.62~22.04.1.
  • Update canonical linux-lowlatency-hwe-6.8 to version 6.8.0-136.136.2~22.04.1.
  • Update canonical linux-nvidia-6.8 to version 6.8.0-1059.62~22.04.1.
  • Update canonical linux-oracle-6.8 to version 6.8.0-1058.61~22.04.1.
  • Update canonical linux-riscv-6.8 to version 6.8.0-136.136~22.04.3.
  • Update canonical linux-realtime-6.8 to version 6.8.1-1056.57~22.04.2.
  • Update canonical linux to version 6.8.0-136.136.
  • Update canonical linux-aws to version 6.8.0-1061.64.
  • Update canonical linux-azure to version 6.8.0-1063.71.
  • Update canonical linux-azure-fde to version 6.8.0-1062.69.
  • Update canonical linux-gcp to version 6.8.0-1064.72.
  • Update canonical linux-gke to version 6.8.0-1059.67.
  • Update canonical linux-gkeop to version 6.8.0-1046.50.
  • Update canonical linux-hwe-7.0 to version 7.0.0-28.28~24.04.1.
  • Update canonical linux-ibm to version 6.8.0-1061.62.
  • Update canonical linux-lowlatency to version 6.8.0-136.136.2.
  • Update canonical linux-nvidia to version 6.8.0-1059.62.
  • Update canonical linux-nvidia-lowlatency to version 6.8.0-1059.62.1.
  • Update canonical linux-nvidia-tegra to version 6.8.0-1030.31.
  • Update canonical linux-oracle to version 6.8.0-1058.61.
  • Update canonical linux-xilinx to version 6.8.0-1033.34.
  • Update canonical linux-aws-fips to version 6.8.0-1061.64+fips1.
  • Update canonical linux-azure-fips to version 6.8.0-1063.71+fips2.
  • Update canonical linux-fips to version 6.8.0-136.136+fips2.
  • Update canonical linux-gcp-fips to version 6.8.0-1064.72+fips1.
  • Update canonical linux-realtime to version 6.8.1-1056.57.
  • Update canonical linux to version 7.0.0-28.28.
  • Update canonical linux-aws to version 7.0.0-1009.9.
  • Update canonical linux-azure to version 7.0.0-1010.10.
  • Update canonical linux-azure-fde to version 7.0.0-1009.9.
  • Update canonical linux-gcp to version 7.0.0-1008.8.
  • Update canonical linux-gke to version 7.0.0-1003.4.
  • Update canonical linux-ibm to version 7.0.0-1010.10.
  • Update canonical linux-oem-7.0 to version 7.0.0-1009.9.
  • Update canonical linux-oracle to version 7.0.0-1008.8.
  • Update canonical linux-raspi to version 7.0.0-1015.15.
  • Update bellsoft linux-lts to version 6.18.35-r1.
  • Update debian linux to version 6.12.94-1.
  • Update debian linux to version 7.0.10-1.
  • Update debian rootio-linux to version 6.1.174-1.root.io.151.
  • Update bellsoft linux-lts to version 6.12.92-r0.
  • Update canonical linux-nvidia-7.0 to version 7.0.0-1016.16~24.04.1.
  • Update canonical linux-raspi to version 6.8.0-1061.65.
  • Update canonical linux-riscv-7.0 to version 7.0.0-28.28.1~24.04.3.
  • Update canonical linux-raspi-realtime to version 6.8.0-2050.52.
  • Update canonical linux-nvidia to version 7.0.0-1016.16.
  • Update canonical linux-nvidia-bos to version 7.0.0-2016.16.
  • Update canonical linux-realtime to version 7.0.0-28.28.1.
  • Update canonical linux-riscv to version 7.0.0-28.28.1.
  • Update canonical rootio-linux to version 6.8.0-136.136.root.io.83.
  • Update canonical linux-azure-7.0 to version 7.0.0-1014.14~24.04.1.
  • Update linux kernel to version 7.0.10.
  • Update canonical linux-gcp-7.0 to version 7.0.0-1011.11~24.04.1.
  • Update canonical linux-bluefield to version 6.8.0-1028.33.
  • Update canonical linux-oracle-7.0 to version 7.0.0-1011.11~24.04.1.
  • Update linux to version 6.8.0-146.146.aikido.89.
  • Update rootio-linux to version 6.8.0-146.146.aikido.89.
  • Update linux to version 6.8.0-147.147.aikido.90.
  • Update rootio-linux to version 6.8.0-147.147.aikido.90.
  • Update linux to version 6.1.190-1.aikido.167.
  • Update rootio-linux to version 6.1.190-1.aikido.167.
  • Update canonical linux-azure-fde-7.0 to version 7.0.0-1013.13~24.04.1.
  • Update bellsoft linux-lts to version 6.1.191-r0.
Affected software
Ecosystem VendorProductAffected versions
Ubuntu:18.04:LTS canonical linux-gke-4.15 All versions
Ubuntu:18.04:LTS canonical linux-gke-5.4 All versions
Ubuntu:18.04:LTS canonical linux-gkeop-5.4 All versions
Ubuntu:18.04:LTS canonical linux-hwe All versions
Ubuntu:18.04:LTS canonical linux-hwe-edge All versions
Ubuntu:18.04:LTS canonical linux-oem All versions
Ubuntu:18.04:LTS canonical linux-oracle-5.0 All versions
Ubuntu:18.04:LTS canonical linux-oracle-5.3 All versions
Ubuntu:20.04:LTS canonical linux-aws-5.11 All versions
Ubuntu:20.04:LTS canonical linux-aws-5.13 All versions
Ubuntu:20.04:LTS canonical linux-aws-5.8 All versions
Ubuntu:20.04:LTS canonical linux-azure-5.11 All versions
Ubuntu:20.04:LTS canonical linux-azure-5.13 All versions
Ubuntu:20.04:LTS canonical linux-azure-5.8 All versions
Ubuntu:20.04:LTS canonical linux-azure-fde All versions
Ubuntu:20.04:LTS canonical linux-gcp-5.11 All versions
Ubuntu:20.04:LTS canonical linux-gcp-5.13 All versions
Ubuntu:20.04:LTS canonical linux-gcp-5.8 All versions
Ubuntu:20.04:LTS canonical linux-gke All versions
Ubuntu:20.04:LTS canonical linux-gke-5.15 All versions
Ubuntu:20.04:LTS canonical linux-gkeop All versions
Ubuntu:20.04:LTS canonical linux-gkeop-5.15 All versions
Ubuntu:20.04:LTS canonical linux-hwe-5.11 All versions
Ubuntu:20.04:LTS canonical linux-hwe-5.13 All versions
Ubuntu:20.04:LTS canonical linux-hwe-5.8 All versions
Ubuntu:20.04:LTS canonical linux-intel-5.13 All versions
Ubuntu:20.04:LTS canonical linux-oem-5.10 All versions
Ubuntu:20.04:LTS canonical linux-oem-5.13 All versions
Ubuntu:20.04:LTS canonical linux-oem-5.14 All versions
Ubuntu:20.04:LTS canonical linux-oem-5.6 All versions
Ubuntu:20.04:LTS canonical linux-oracle-5.11 All versions
Ubuntu:20.04:LTS canonical linux-oracle-5.13 All versions
Ubuntu:20.04:LTS canonical linux-oracle-5.8 All versions
Ubuntu:20.04:LTS canonical linux-raspi2 All versions
Ubuntu:20.04:LTS canonical linux-riscv All versions
Ubuntu:20.04:LTS canonical linux-riscv-5.11 All versions
Ubuntu:20.04:LTS canonical linux-riscv-5.8 All versions
Ubuntu:22.04:LTS canonical linux-allwinner-5.19 All versions
Ubuntu:22.04:LTS canonical linux-aws-5.19 All versions
Ubuntu:22.04:LTS canonical linux-aws-6.2 All versions
Ubuntu:22.04:LTS canonical linux-aws-6.5 All versions
Ubuntu:22.04:LTS canonical linux-aws-6.8 < 6.8.0-1061.64~22.04.1
Fix: upgrade to 6.8.0-1061.64~22.04.1
Ubuntu:22.04:LTS canonical linux-azure-5.19 All versions
Ubuntu:22.04:LTS canonical linux-azure-6.2 All versions
Ubuntu:22.04:LTS canonical linux-azure-6.5 All versions
Ubuntu:22.04:LTS canonical linux-azure-6.8 < 6.8.0-1063.71~22.04.1
Fix: upgrade to 6.8.0-1063.71~22.04.1
Ubuntu:22.04:LTS canonical linux-azure-fde-5.19 All versions
Ubuntu:22.04:LTS canonical linux-azure-fde-6.2 All versions
Ubuntu:22.04:LTS canonical linux-azure-fde-6.8 < 6.8.0-1062.69~22.04.1
Fix: upgrade to 6.8.0-1062.69~22.04.1
Ubuntu:22.04:LTS canonical linux-gcp-5.19 All versions
Showing 50 of 186. Show the rest
Ecosystem VendorProductAffected versions
Ubuntu:22.04:LTS canonical linux-gcp-6.2 All versions
Ubuntu:22.04:LTS canonical linux-gcp-6.5 All versions
Ubuntu:22.04:LTS canonical linux-gcp-6.8 < 6.8.0-1064.72~22.04.1
Fix: upgrade to 6.8.0-1064.72~22.04.1
Ubuntu:22.04:LTS canonical linux-hwe-5.19 All versions
Ubuntu:22.04:LTS canonical linux-hwe-6.2 All versions
Ubuntu:22.04:LTS canonical linux-hwe-6.5 All versions
Ubuntu:22.04:LTS canonical linux-hwe-6.8 < 6.8.0-136.136~22.04.1
Fix: upgrade to 6.8.0-136.136~22.04.1
Ubuntu:22.04:LTS canonical linux-ibm-6.8 < 6.8.0-1061.62~22.04.1
Fix: upgrade to 6.8.0-1061.62~22.04.1
Ubuntu:22.04:LTS canonical linux-intel-iot-realtime All versions
Ubuntu:22.04:LTS canonical linux-lowlatency-hwe-5.19 All versions
Ubuntu:22.04:LTS canonical linux-lowlatency-hwe-6.2 All versions
Ubuntu:22.04:LTS canonical linux-lowlatency-hwe-6.5 All versions
Ubuntu:22.04:LTS canonical linux-lowlatency-hwe-6.8 < 6.8.0-136.136.2~22.04.1
Fix: upgrade to 6.8.0-136.136.2~22.04.1
Ubuntu:22.04:LTS canonical linux-nvidia-6.2 All versions
Ubuntu:22.04:LTS canonical linux-nvidia-6.5 All versions
Ubuntu:22.04:LTS canonical linux-nvidia-6.8 < 6.8.0-1059.62~22.04.1
Fix: upgrade to 6.8.0-1059.62~22.04.1
Ubuntu:22.04:LTS canonical linux-oem-5.17 All versions
Ubuntu:22.04:LTS canonical linux-oem-6.0 All versions
Ubuntu:22.04:LTS canonical linux-oem-6.1 All versions
Ubuntu:22.04:LTS canonical linux-oem-6.5 All versions
Ubuntu:22.04:LTS canonical linux-oracle-6.5 All versions
Ubuntu:22.04:LTS canonical linux-oracle-6.8 < 6.8.0-1058.61~22.04.1
Fix: upgrade to 6.8.0-1058.61~22.04.1
Ubuntu:22.04:LTS canonical linux-realtime All versions
Ubuntu:22.04:LTS canonical linux-riscv All versions
Ubuntu:22.04:LTS canonical linux-riscv-5.19 All versions
Ubuntu:22.04:LTS canonical linux-riscv-6.5 All versions
Ubuntu:22.04:LTS canonical linux-riscv-6.8 < 6.8.0-136.136~22.04.3
Fix: upgrade to 6.8.0-136.136~22.04.3
Ubuntu:22.04:LTS canonical linux-starfive-5.19 All versions
Ubuntu:22.04:LTS canonical linux-starfive-6.2 All versions
Ubuntu:22.04:LTS canonical linux-starfive-6.5 All versions
Ubuntu:Pro:Realtime:22.04:LTS canonical linux-realtime-6.8 < 6.8.1-1056.57~22.04.2
Fix: upgrade to 6.8.1-1056.57~22.04.2
Ubuntu:24.04:LTS canonical linux < 6.8.0-136.136
Fix: upgrade to 6.8.0-136.136
Ubuntu:24.04:LTS canonical linux-aws < 6.8.0-1061.64
Fix: upgrade to 6.8.0-1061.64
Ubuntu:24.04:LTS canonical linux-aws-6.14 All versions
Ubuntu:24.04:LTS canonical linux-aws-6.17 All versions
Ubuntu:24.04:LTS canonical linux-azure < 6.8.0-1063.71
Fix: upgrade to 6.8.0-1063.71
Ubuntu:24.04:LTS canonical linux-azure-6.11 All versions
Ubuntu:24.04:LTS canonical linux-azure-6.14 All versions
Ubuntu:24.04:LTS canonical linux-azure-6.17 All versions
Ubuntu:24.04:LTS canonical linux-azure-fde < 6.8.0-1062.69
Fix: upgrade to 6.8.0-1062.69
Ubuntu:24.04:LTS canonical linux-azure-fde-6.14 All versions
Ubuntu:24.04:LTS canonical linux-azure-nvidia All versions
Ubuntu:24.04:LTS canonical linux-azure-nvidia-6.14 All versions
Ubuntu:24.04:LTS canonical linux-gcp < 6.8.0-1064.72
Fix: upgrade to 6.8.0-1064.72
Ubuntu:24.04:LTS canonical linux-gcp-6.11 All versions
Ubuntu:24.04:LTS canonical linux-gcp-6.14 All versions
Ubuntu:24.04:LTS canonical linux-gcp-6.17 All versions
Ubuntu:24.04:LTS canonical linux-gke < 6.8.0-1059.67
Fix: upgrade to 6.8.0-1059.67
Ubuntu:24.04:LTS canonical linux-gkeop < 6.8.0-1046.50
Fix: upgrade to 6.8.0-1046.50
Ubuntu:24.04:LTS canonical linux-hwe-6.11 All versions
Ubuntu:24.04:LTS canonical linux-hwe-6.14 All versions
Ubuntu:24.04:LTS canonical linux-hwe-6.17 All versions
Ubuntu:24.04:LTS canonical linux-hwe-7.0 < 7.0.0-28.28~24.04.1
Fix: upgrade to 7.0.0-28.28~24.04.1
Ubuntu:24.04:LTS canonical linux-ibm < 6.8.0-1061.62
Fix: upgrade to 6.8.0-1061.62
Ubuntu:24.04:LTS canonical linux-lowlatency < 6.8.0-136.136.2
Fix: upgrade to 6.8.0-136.136.2
Ubuntu:24.04:LTS canonical linux-lowlatency-hwe-6.11 All versions
Ubuntu:24.04:LTS canonical linux-nvidia < 6.8.0-1059.62
Fix: upgrade to 6.8.0-1059.62
Ubuntu:24.04:LTS canonical linux-nvidia-6.11 All versions
Ubuntu:24.04:LTS canonical linux-nvidia-6.17 All versions
Ubuntu:24.04:LTS canonical linux-nvidia-7.0 < 7.0.0-1016.16~24.04.1
Fix: upgrade to 7.0.0-1016.16~24.04.1
Ubuntu:24.04:LTS canonical linux-nvidia-lowlatency < 6.8.0-1059.62.1
Fix: upgrade to 6.8.0-1059.62.1
Ubuntu:24.04:LTS canonical linux-nvidia-tegra < 6.8.0-1030.31
Fix: upgrade to 6.8.0-1030.31
Ubuntu:24.04:LTS canonical linux-oem-6.11 All versions
Ubuntu:24.04:LTS canonical linux-oem-6.14 All versions
Ubuntu:24.04:LTS canonical linux-oem-6.17 All versions
Ubuntu:24.04:LTS canonical linux-oem-6.8 All versions
Ubuntu:24.04:LTS canonical linux-oracle < 6.8.0-1058.61
Fix: upgrade to 6.8.0-1058.61
Ubuntu:24.04:LTS canonical linux-oracle-6.14 All versions
Ubuntu:24.04:LTS canonical linux-oracle-6.17 All versions
Ubuntu:24.04:LTS canonical linux-raspi < 6.8.0-1061.65
Fix: upgrade to 6.8.0-1061.65
Ubuntu:24.04:LTS canonical linux-raspi-realtime All versions
Ubuntu:24.04:LTS canonical linux-realtime All versions
Ubuntu:24.04:LTS canonical linux-riscv All versions
Ubuntu:24.04:LTS canonical linux-riscv-6.14 All versions
Ubuntu:24.04:LTS canonical linux-riscv-6.17 All versions
Ubuntu:24.04:LTS canonical linux-xilinx < 6.8.0-1033.34
Fix: upgrade to 6.8.0-1033.34
Ubuntu:Nvidia-BlueField:24.04:LTS canonical linux-bluefield < 6.8.0-1028.33
Fix: upgrade to 6.8.0-1028.33
Ubuntu:Pro:FIPS-updates:24.04:LTS canonical linux-aws-fips < 6.8.0-1061.64+fips1
Fix: upgrade to 6.8.0-1061.64+fips1
Ubuntu:Pro:FIPS-updates:24.04:LTS canonical linux-azure-fips < 6.8.0-1063.71+fips2
Fix: upgrade to 6.8.0-1063.71+fips2
Ubuntu:Pro:FIPS-updates:24.04:LTS canonical linux-fips < 6.8.0-136.136+fips2
Fix: upgrade to 6.8.0-136.136+fips2
Ubuntu:Pro:FIPS-updates:24.04:LTS canonical linux-gcp-fips < 6.8.0-1064.72+fips1
Fix: upgrade to 6.8.0-1064.72+fips1
Ubuntu:Pro:Realtime:24.04:LTS canonical linux-raspi-realtime < 6.8.0-2050.52
Fix: upgrade to 6.8.0-2050.52
Ubuntu:Pro:Realtime:24.04:LTS canonical linux-realtime < 6.8.1-1056.57
Fix: upgrade to 6.8.1-1056.57
Ubuntu:Pro:Realtime:24.04:LTS canonical linux-realtime-6.14 All versions
Ubuntu:Pro:Realtime:24.04:LTS canonical linux-realtime-6.17 All versions
Ubuntu:25.10 canonical linux All versions
Ubuntu:25.10 canonical linux-aws All versions
Ubuntu:25.10 canonical linux-azure All versions
Ubuntu:25.10 canonical linux-azure-fde All versions
Ubuntu:25.10 canonical linux-gcp All versions
Ubuntu:25.10 canonical linux-oracle All versions
Ubuntu:25.10 canonical linux-raspi All versions
Ubuntu:25.10 canonical linux-realtime All versions
Ubuntu:25.10 canonical linux-riscv All versions
Ubuntu:26.04:LTS canonical linux < 7.0.0-28.28
Fix: upgrade to 7.0.0-28.28
Ubuntu:26.04:LTS canonical linux-aws < 7.0.0-1009.9
Fix: upgrade to 7.0.0-1009.9
Ubuntu:26.04:LTS canonical linux-azure < 7.0.0-1010.10
Fix: upgrade to 7.0.0-1010.10
Ubuntu:26.04:LTS canonical linux-azure-fde < 7.0.0-1009.9
Fix: upgrade to 7.0.0-1009.9
Ubuntu:26.04:LTS canonical linux-gcp < 7.0.0-1008.8
Fix: upgrade to 7.0.0-1008.8
Ubuntu:26.04:LTS canonical linux-gke < 7.0.0-1003.4
Fix: upgrade to 7.0.0-1003.4
Ubuntu:26.04:LTS canonical linux-ibm < 7.0.0-1010.10
Fix: upgrade to 7.0.0-1010.10
Ubuntu:26.04:LTS canonical linux-nvidia < 7.0.0-1016.16
Fix: upgrade to 7.0.0-1016.16
Ubuntu:26.04:LTS canonical linux-nvidia-bos < 7.0.0-2016.16
Fix: upgrade to 7.0.0-2016.16
Ubuntu:26.04:LTS canonical linux-oem-7.0 < 7.0.0-1009.9
Fix: upgrade to 7.0.0-1009.9
Ubuntu:26.04:LTS canonical linux-oracle < 7.0.0-1008.8
Fix: upgrade to 7.0.0-1008.8
Ubuntu:26.04:LTS canonical linux-raspi < 7.0.0-1015.15
Fix: upgrade to 7.0.0-1015.15
Alpaquita:stream bellsoft linux-lts >= 6.12.92-r1, < 6.18.35-r1
Fix: upgrade to 6.18.35-r1
Debian:12 debian linux All versions
Debian:13 debian linux < 6.12.94-1
Fix: upgrade to 6.12.94-1
Debian:14 debian linux < 7.0.10-1
Fix: upgrade to 7.0.10-1
Root:Debian:12 debian rootio-linux < 6.1.174-1.root.io.151
Fix: upgrade to 6.1.174-1.root.io.151
Alpaquita:23 bellsoft linux-lts >= 6.1.175-r0
>= 6.1.189-r0, < 6.1.191-r0
Fix: upgrade to 6.1.191-r0
Alpaquita:25 bellsoft linux-lts >= 6.12.87-r0, < 6.12.92-r0
Fix: upgrade to 6.12.92-r0
Ubuntu:24.04:LTS canonical linux-azure-7.0 < 7.0.0-1014.14~24.04.1
Fix: upgrade to 7.0.0-1014.14~24.04.1
Ubuntu:24.04:LTS canonical linux-gcp-7.0 < 7.0.0-1011.11~24.04.1
Fix: upgrade to 7.0.0-1011.11~24.04.1
Ubuntu:24.04:LTS canonical linux-oracle-7.0 < 7.0.0-1011.11~24.04.1
Fix: upgrade to 7.0.0-1011.11~24.04.1
Ubuntu:24.04:LTS canonical linux-riscv-7.0 < 7.0.0-28.28.1~24.04.3
Fix: upgrade to 7.0.0-28.28.1~24.04.3
Ubuntu:16.04:LTS canonical linux-hwe-edge All versions
Ubuntu:18.04:LTS canonical linux-aws-5.0 All versions
Ubuntu:18.04:LTS canonical linux-aws-5.3 All versions
Ubuntu:18.04:LTS canonical linux-azure All versions
Ubuntu:18.04:LTS canonical linux-azure-5.3 All versions
Ubuntu:18.04:LTS canonical linux-azure-edge All versions
Ubuntu:18.04:LTS canonical linux-gcp All versions
Ubuntu:18.04:LTS canonical linux-gcp-5.3 All versions
Ubuntu:26.04:LTS canonical linux-realtime < 7.0.0-28.28.1
Fix: upgrade to 7.0.0-28.28.1
Ubuntu:26.04:LTS canonical linux-riscv < 7.0.0-28.28.1
Fix: upgrade to 7.0.0-28.28.1
Root:Ubuntu:24.04 canonical rootio-linux < 6.8.0-136.136.root.io.83
Fix: upgrade to 6.8.0-136.136.root.io.83
– linux linux < d161c4456672f8c431e3bdf9bea817b490d14181
6.0
< 0fe79375e48efee268e766c800bacbd58bed655b
– linux linux_kernel >= 6.0, < 6.12.91
>= 6.13, < 6.18.33
>= 6.19, < 7.0.10
7.1
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Linux linux kernel >= 6.19.0, < 7.0.10
Fix: upgrade to 7.0.10
Ubuntu:24.04:LTS canonical linux-azure-fde-7.0 < 7.0.0-1013.13~24.04.1
Fix: upgrade to 7.0.0-1013.13~24.04.1
Root:Ubuntu:24.04 – linux < 6.8.0-146.146.aikido.89
< 6.8.0-147.147.aikido.90
Fix: upgrade to 6.8.0-146.146.aikido.89
Root:Ubuntu:24.04 – rootio-linux < 6.8.0-146.146.aikido.89
< 6.8.0-147.147.aikido.90
Fix: upgrade to 6.8.0-146.146.aikido.89
Root:Debian:12 – linux < 6.1.190-1.aikido.167
Fix: upgrade to 6.1.190-1.aikido.167
Root:Debian:12 – rootio-linux < 6.1.190-1.aikido.167
Fix: upgrade to 6.1.190-1.aikido.167
Original advisory text
BELL-CVE-2026-52961
In the Linux kernel, the following vulnerability has been resolved:

ceph: fix BUG_ON in __ceph_build_xattrs_blob() due to stale blob size

The generic/642 test-case can reproduce the kernel crash:

[40243.605254] ------------[ cut here ]------------
[40243.605956] kernel BUG at fs/ceph/xattr.c:918!
[40243.607142] Oops: invalid opcode: 0000 [#1] SMP PTI
[40243.608067] CPU: 7 UID: 0 PID: 498762 Comm: kworker/7:1 Not tainted 7.0.0-rc7+ #3 PREEMPT(full)
[40243.609700] Hardware name: QEMU Ubuntu 25.10 PC v2 (i440FX + PIIX, + 10.1 machine, 1996), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[40243.611820] Workqueue: ceph-msgr ceph_con_workfn
[40243.612715] RIP: 0010:__ceph_build_xattrs_blob+0x1b8/0x1e0
[40243.613731] Code: 0f 84 82 fe ff ff e9 cf 8e 56 ff 48 8d 65 e8 31 c0 5b 41 5c 41 5d 5d 31 d2 31 c9 31 f6 31 ff 45 31 c0 45 31 c9 c3 cc cc cc cc <0f> 0b 4c 8b 62 08 41 8b 85 24 07 00 00 49 83 c4 04 41 89 44 24 fc
[40243.616888] RSP: 0018:ffffcc80c4d4b688 EFLAGS: 00010287
[40243.617773] RAX: 0000000000010026 RBX: 0000000000000001 RCX: 0000000000000000
[40243.618928] RDX: ffff8a773798dee0 RSI: 0000000000000000 RDI: 0000000000000000
[40243.620158] RBP: ffffcc80c4d4b6a0 R08: 0000000000000000 R09: 0000000000000000
[40243.621573] R10: 0000000000000000 R11: 0000000000000000 R12: ffff8a75f3b58000
[40243.622907] R13: ffff8a75f3b58000 R14: 0000000000000080 R15: 000000000000bffd
[40243.624054] FS: 0000000000000000(0000) GS:ffff8a787d1b4000(0000) knlGS:0000000000000000
[40243.625331] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[40243.626269] CR2: 000072f390b623c0 CR3: 000000011c02a003 CR4: 0000000000372ef0
[40243.627408] Call Trace:
[40243.627839] <TASK>
[40243.628188] __prep_cap+0x3fd/0x4a0
[40243.628789] ? do_raw_spin_unlock+0x4e/0xe0
[40243.629474] ceph_check_caps+0x46a/0xc80
[40243.630094] ? __lock_acquire+0x4a2/0x2650
[40243.630773] ? find_held_lock+0x31/0x90
[40243.631347] ? handle_cap_grant+0x79f/0x1060
[40243.632068] ? lock_release+0xd9/0x300
[40243.632696] ? __mutex_unlock_slowpath+0x3e/0x340
[40243.633429] ? lock_release+0xd9/0x300
[40243.634052] handle_cap_grant+0xcf6/0x1060
[40243.634745] ceph_handle_caps+0x122b/0x2110
[40243.635415] mds_dispatch+0x5bd/0x2160
[40243.636034] ? ceph_con_process_message+0x65/0x190
[40243.636828] ? lock_release+0xd9/0x300
[40243.637431] ceph_con_process_message+0x7a/0x190
[40243.638184] ? kfree+0x311/0x4f0
[40243.638749] ? kfree+0x311/0x4f0
[40243.639268] process_message+0x16/0x1a0
[40243.639915] ? sg_free_table+0x39/0x90
[40243.640572] ceph_con_v2_try_read+0xf58/0x2120
[40243.641255] ? lock_acquire+0xc8/0x300
[40243.641863] ceph_con_workfn+0x151/0x820
[40243.642493] process_one_work+0x22f/0x630
[40243.643093] ? process_one_work+0x254/0x630
[40243.643770] worker_thread+0x1e2/0x400
[40243.644332] ? __pfx_worker_thread+0x10/0x10
[40243.645020] kthread+0x109/0x140
[40243.645560] ? __pfx_kthread+0x10/0x10
[40243.646125] ret_from_fork+0x3f8/0x480
[40243.646752] ? __pfx_kthread+0x10/0x10
[40243.647316] ? __pfx_kthread+0x10/0x10
[40243.647919] ret_from_fork_asm+0x1a/0x30
[40243.648556] </TASK>
[40243.648902] Modules linked in: overlay hctr2 libpolyval chacha libchacha adiantum libnh libpoly1305 essiv intel_rapl_msr intel_rapl_common intel_uncore_frequency_common skx_edac_common nfit kvm_intel kvm irqbypass joydev ghash_clmulni_intel aesni_intel rapl input_leds mac_hid psmouse vga16fb serio_raw vgastate floppy i2c_piix4 pata_acpi bochs qemu_fw_cfg i2c_smbus sch_fq_codel rbd dm_crypt msr parport_pc ppdev lp parport efi_pstore
[40243.654766] ---[ end trace 0000000000000000 ]---

Commit d93231a6bc8a ("ceph: prevent a client from exceeding the MDS
maximum xattr size") moved the required_blob_size computation to before
the __build_xattrs() call, introducing a race.

__build_xattrs() releases and reacquires i_ceph_lock during execution.
In that window, handle_cap_grant() may update i_xattrs.blob with a
newer MDS-provided blob and bump i_xattrs.version. When
__bui
---truncated---
References
Fix within
Internet-facing 60 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit (estimated)
  • Gives an attacker partial control (estimated)
Severity
5.5 Medium
Exploitation
<1% chance of attack within 30 days
Type
CWE-617Reachable Assertion
Timeline
Published26 Jun 2026
Updated4 Nov 2026
First seen24 Jun 2026
Sources
DEBIAN-CVE-2026-52961 · OSV
ROOT-OS-DEBIAN-12-CVE-2026-52961 · OSV
CVE-2026-52961 · NVD
BELL-CVE-2026-52961 · OSV
ROOT-OS-UBUNTU-2404-CVE-2026-52961 · OSV
UBUNTU-CVE-2026-52961 · OSV
CVE-2026-52961 · MITRE
CVE-2026-52961 · OSV
Track software like this
Free during beta