Use-After-Free Vulnerability in Ceph Library for Linux Kernel

CVE-2025-68285

What is CVE-2025-68285?

A use-after-free vulnerability exists in the Ceph library of the Linux kernel, which can lead to potential system instability and security risks. The issue arises in the wait loop within __ceph_open_session(), where a race condition can occur when the client receives a new monmap or osdmap just after an initial map has been handled. This can cause dereferencing of already freed memory, leading to undefined behavior. The vulnerability can be triggered during specific workloads, such as mounting Ceph filesystems. Proper locking mechanisms and condition checks are needed to ensure safe access to these maps and avoid the risk of exploiting this flaw.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References