PatchSiren

PatchSiren cyber security CVE debrief

CVE-2026-80528 Linux CVE debrief

A Linux kernel vulnerability allows a crash when using ceph filesystem reclaim with certain journaling configurations. This issue arises from how the ceph filesystem interacts with the journaling mechanism of another filesystem, like ext4, through a shared kernel handle. The bug can be triggered when handle_reply() stores a ceph_mds_request pointer in current->journal_info while populating inode and dentry caches from an MDS reply. Subsequent allocations in this context can enter direct reclaim, potentially pruning dentries from another filesystem. If this leads to dirtying an ext4 inode, ext4 initiates a JBD2 transaction. JBD2 misinterprets the Ceph request in current->journal_info as a journal handle and attempts to access its r_tid as h_transaction, causing a kernel paging request crash.

Vendor
Linux
Product
Unknown
CVSS
CRITICAL 9.8
CISA KEV
Not listed in stored evidence
Original CVE published
2026-08-26
Original CVE updated
2026-10-16
Advisory published
2026-08-26
Advisory updated
2026-10-16

Who should care

Linux system administrators, security teams, and developers using or maintaining systems with the Linux kernel and ceph filesystem should verify exposure and apply patches or mitigations as soon as possible. This includes operators managing Linux environments, platform administrators, vulnerability management teams, and security teams responsible for system reliability and data protection.

Why it matters

This vulnerability can cause system crashes and potential data loss or corruption. Linux system administrators and security teams should verify exposure and apply patches or mitigations as soon as possible.

  • Potential system crashes due to misinterpretation of journal handles.
  • Possible data loss or corruption if the vulnerability is exploited.
  • Need for verification of system exposure and application of patches or mitigations.
  • Potential impact on system availability and reliability.

Technical summary

The vulnerability arises from the interaction between the ceph filesystem and the journaling mechanism of another filesystem, like ext4. When handle_reply() stores a ceph_mds_request pointer in current->journal_info, subsequent allocations can enter direct reclaim, potentially pruning dentries from another filesystem. If this leads to dirtying an ext4 inode, ext4 initiates a JBD2 transaction, causing a kernel crash.

Defensive priority

Linux system administrators and security teams should prioritize verification of exposure and apply patches or mitigations as soon as possible.

Recommended defensive actions

  • Verify system exposure by checking Linux kernel versions and configurations.
  • Apply patches or updates provided by Linux distributions.
  • Monitor system logs for potential indicators of compromise.
  • Implement compensating controls, such as restricting access to sensitive data and systems.
  • Review the supplied official advisory or CVE record to validate affected scope, severity, and vendor guidance.
  • Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up.
  • Track exceptions, retest remediated assets, and close the item only after evidence is documented.

Evidence notes

The official CVE Program record and NVD vulnerability detail provide information on the vulnerability. Linux kernel developers have addressed the issue through specific commits. Evidence is limited to public sources and may not reflect the full scope or impact. Verify exposure and apply patches or mitigations as soon as possible. Check Linux kernel versions and configurations for potential exposure. Monitor system logs for indicators of compromise.

Sources and references

Verified primary and authoritative sources

  • CVE-2026-80528 CVE Program record

    Publisher, destination, and source semantics verified

    URL: https://www.cve.org/CVERecord?id=CVE-2026-80528

    CVE Program - Official CVE Program record with source-provided CVE metadata.

  • CVE-2026-80528 NVD vulnerability detail

    Publisher, destination, and source semantics verified

    URL: https://nvd.nist.gov/vuln/detail/CVE-2026-80528

    NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

  • ceph: avoid fs reclaim while using current->journal_info

    Unverified legacy reference

    URL: https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/80xxx/CVE-2026-80528.json

    cve_program_cvelist_v5

  • Source reference

    Unverified legacy reference

    URL: https://git.kernel.org/stable/c/ca5fa2380dd90a0adb01580fa6225025351a90f6

    Supplemental source

  • Source reference

    Unverified legacy reference

    URL: https://git.kernel.org/stable/c/00c12f57a87f537fa8779258fb3a03003a99963e

    Supplemental source

  • Source reference

    Unverified legacy reference

    URL: https://git.kernel.org/stable/c/4dbb2c02558e71f93510a6461d7e798b67426b49

    Supplemental source

  • Source reference

    Unverified legacy reference

    URL: https://git.kernel.org/stable/c/c8a21660c3b90864c391164eea5622e7b5b2897c

    Supplemental source

  • Source reference

    Unverified legacy reference

    URL: https://git.kernel.org/stable/c/47b745747b3aa39064724a642884f9df924ddf20

    Supplemental source

  • Source reference

    Unverified legacy reference

    URL: https://git.kernel.org/stable/c/79d95b43ca090426399651ed580dd9bf2db36ab8

    Supplemental source

  • Source reference

    Unverified legacy reference

    URL: https://git.kernel.org/stable/c/b6a0989613072499633e761a1536428a466de7d3

    Supplemental source

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.