Ceph vulnerabilities and fixes

CVEs that mention Ceph, ranked by priority. 14 tracked.

Ceph has 14 tracked vulnerabilities, 9 critical. A fixed release or vendor patch exists for 5. Most recent: 2026-09-16. Highest priority: CVE-2026-89655 (score 61/100).

• CVE-2026-89655 CRITICAL 9.8 In the Linux kernel, the following vulnerability has been resolved: ceph: fix UAF in __kick_flushing_caps() o
• CVE-2026-89654 CRITICAL 9.8 In the Linux kernel, the following vulnerability has been resolved: ceph: fix UAF in check_new_map() on sessi
• CVE-2026-89651 CRITICAL 9.8 In the Linux kernel, the following vulnerability has been resolved: ceph: bound MDSCapAuth path and fs_name d
• CVE-2026-89990 CRITICAL 9.8 In the Linux kernel, the following vulnerability has been resolved: ceph: lock mutex in ceph_mds_check_access
• CVE-2026-89649 CRITICAL 9.1 In the Linux kernel, the following vulnerability has been resolved: ceph: bound xattr value length in __build
• CVE-2026-89653 CRITICAL 9.8 In the Linux kernel, the following vulnerability has been resolved: ceph: reject export_targets ranks >= CEPH
• CVE-2026-90042 CRITICAL 9.8 In the Linux kernel, the following vulnerability has been resolved: ceph: properly decrypt filenames in vmall
• CVE-2026-89652 CRITICAL 9.8 In the Linux kernel, the following vulnerability has been resolved: ceph: bound copied dentry name length in
• CVE-2026-89650 CRITICAL 9.1 In the Linux kernel, the following vulnerability has been resolved: ceph: bound num_export_targets array for
• CVE-2026-39979 MEDIUM 6.5 UPGRADE UPGRADE jq is a command-line JSON processor
• CVE-2026-89647 HIGH 7.5 In the Linux kernel, the following vulnerability has been resolved: ceph: do not repeat ceph_trim_dentries()
• CVE-2026-89648 HIGH 7.5 In the Linux kernel, the following vulnerability has been resolved: ceph: cap delegated inode count in ceph_p
• CVE-2026-89657 HIGH 7.5 In the Linux kernel, the following vulnerability has been resolved: libceph: validate OSD extent maps before
• CVE-2026-89646 HIGH 7.8 In the Linux kernel, the following vulnerability has been resolved: ceph: fix leaked inode reference on write

FAQ

How do I fix Ceph vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is Ceph being exploited right now?

None of the tracked Ceph CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which Ceph CVE should I patch first?

CVE-2026-89655 currently ranks highest (61/100): In the Linux kernel, the following vulnerability has been resolved: ceph: fix UAF in __kick_flushing_caps() o.

RSS feed for Ceph · ← Back to latest CVEs