CVE-2026-68153
In the Linux kernel, the following vulnerability has been resolved:
libceph: remove debugfs files before client teardown
ceph_destroy_client() tears down the monitor client before removing
the per-client debugfs files. A concurrent read of the monmap debugfs
file can enter monmap_show() after ceph_monc_stop() has freed
monc->monmap, triggering a use-after-free.
Remove the debugfs files before stopping the OSD and monitor clients.
debugfs_remove() drains active handlers and prevents new accesses, so
the debugfs callbacks can no longer race the rest of client teardown.
CSIRTS triage
- What
- libceph debugfs files are not removed before client teardown, causing use-after-free and information disclosure.
- Who is affected
- All systems using Ceph client functionality in affected kernel versions.
- Urgency
- Critical; CVSS 9.8 severity indicates potential for high-impact exploitation and should be patched immediately.
- Action
- Apply kernel security patch for libceph debugfs cleanup before client teardown.
AI-assisted analysis generated from the source advisory — verify against the original.
⚡ Watch CVE-2026-68153
Get an email if CVE-2026-68153 is added to CISA KEV, gains public exploit code, or a new advisory cites it — max one per day, one-click unsubscribe.
Exploitation outlook
- Low exploitation risk0.13% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 3% of all EPSS-scored CVEs.
Advisory coverage (2)
- criticalCVE-2026-68153: libceph: remove debugfs files before client teardownmsrc · 2026-08-11
- highCVE-2026-68153: In the Linux kernel, the following vulnerability has been resolved: libceph: remove debugfs fi…nvd · 2026-08-10
External references
Embed the live status
— this badge updates automatically when the KEV or exploit status changes. How to embed it →
[](https://www.csirts.com/cve/CVE-2026-68153)