PT-2025-40101 · Linux+4 · Linux Kernel+4
Published
2025-08-12
·
Updated
2026-05-07
·
CVE-2025-39927
CVSS v2.0
5.5
Medium
| Vector | AV:L/AC:H/Au:S/C:N/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
A race condition exists in the Ceph implementation within the Linux kernel related to validating the parent directory inode before applying state changes. Specifically, the issue arises when concurrent operations, such as rename operations, cause the
r parent to become stale between the request initiation and reply processing. This can lead to state changes being applied to incorrect directory inodes. A related problem involves the incorrect handling of CEPH CAP PIN references when r parent is updated, leading to reference leaks and potential underflows. The fix involves adding validation to ensure the cached parent directory inode matches the directory information in MDS replies and correctly adjusting the CEPH CAP PIN reference when r parent is updated.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Race Condition
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Ceph
Debian
Linuxmint
Linux Kernel
Ubuntu