CVE-2026-80527: In the Linux kernel, the following vulnerability has been resolved: ceph: fix hanging __ceph_get_caps() with stale mds_
Summary
A bug in the Linux kernel's Ceph file system can cause a process to hang forever while trying to read a file. This happens when the system's local record of what capabilities (permissions) it wants from the server gets out of sync with what the server actually knows about, especially after the server revokes read permissions from another client.
Solution / Mitigation
The fix implements two changes: (1) stop waiting forever in __ceph_get_caps() by adding a bounded wait time, then fall back to a retry path; (2) modify ceph_renew_caps() to issue a synchronous OPEN request whenever the inode does not actually hold the wanted capabilities, instead of only calling ceph_check_caps(). The code now checks if (issued & wanted) == wanted before using the asynchronous path, ensuring that stalled waiters eventually retry through a path that does not rely on stale mds_wanted state.
Vulnerability Details
EPSS: 0.0%
August 26, 2026
Classification
Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-80527
First tracked: August 26, 2026 at 02:07 PM
Classified by LLM (prompt v3) · confidence: 95%