In the Linux kernel, the following vulnerability has been resolved: ceph: do not repeat ceph_trim_dentries() if no progress possible… (CVE-2026-89647)
A Linux kernel vulnerability in the Ceph filesystem was resolved to prevent a busy loop in the ceph_trim_dentries() function when no progress is possible. The issue caused excessive CPU consumption due to repeated retries without reclaiming any leases, especially when there was no cap pressure and all leases were valid. The fix changes lease handling logic to avoid unnecessary list rewrites and stops retrying when no progress can be made.
AI Analysis
Technical Summary
The vulnerability in the Linux kernel's Ceph filesystem involved the ceph_cap_reclaim_work() function re-queuing itself repeatedly whenever ceph_trim_dentries() returned -EAGAIN, which occurred when the lease walk exhausted its scan budget without reclaiming any leases. This created a busy loop consuming CPU cycles without progress. The problem was exacerbated by __dir_lease_check() returning TOUCH for every valid lease when expire_dir_lease was false, causing pointless list rewrites and timestamp resets that prevented aging out. The patch fixes this by returning KEEP instead of TOUCH when not reclaiming leases, only returning -EAGAIN if something was freed, and bailing out with success when no progress is made and no cap pressure exists. This significantly reduces CPU usage under these conditions.
Potential Impact
Without the patch, systems running Ceph on the Linux kernel could experience high CPU usage due to a busy loop in lease reclamation logic, potentially degrading performance. The issue does not indicate direct security compromise but can cause resource exhaustion and performance degradation on affected systems.
Mitigation Recommendations
A fix for this vulnerability has been implemented in the Linux kernel. Users should update to a kernel version that includes this patch to prevent the busy loop and excessive CPU consumption. No additional mitigation steps are required beyond applying the official fix.
In the Linux kernel, the following vulnerability has been resolved: ceph: do not repeat ceph_trim_dentries() if no progress possible… (CVE-2026-89647)
Description
A Linux kernel vulnerability in the Ceph filesystem was resolved to prevent a busy loop in the ceph_trim_dentries() function when no progress is possible. The issue caused excessive CPU consumption due to repeated retries without reclaiming any leases, especially when there was no cap pressure and all leases were valid. The fix changes lease handling logic to avoid unnecessary list rewrites and stops retrying when no progress can be made.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The vulnerability in the Linux kernel's Ceph filesystem involved the ceph_cap_reclaim_work() function re-queuing itself repeatedly whenever ceph_trim_dentries() returned -EAGAIN, which occurred when the lease walk exhausted its scan budget without reclaiming any leases. This created a busy loop consuming CPU cycles without progress. The problem was exacerbated by __dir_lease_check() returning TOUCH for every valid lease when expire_dir_lease was false, causing pointless list rewrites and timestamp resets that prevented aging out. The patch fixes this by returning KEEP instead of TOUCH when not reclaiming leases, only returning -EAGAIN if something was freed, and bailing out with success when no progress is made and no cap pressure exists. This significantly reduces CPU usage under these conditions.
Potential Impact
Without the patch, systems running Ceph on the Linux kernel could experience high CPU usage due to a busy loop in lease reclamation logic, potentially degrading performance. The issue does not indicate direct security compromise but can cause resource exhaustion and performance degradation on affected systems.
Mitigation Recommendations
A fix for this vulnerability has been implemented in the Linux kernel. Users should update to a kernel version that includes this patch to prevent the busy loop and excessive CPU consumption. No additional mitigation steps are required beyond applying the official fix.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-m843-78wr-m386
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2026-89647"]
Threat ID: 6aa4a00355bf5e2cf5a86627
Added to database: 09/12/2026, 00:42:43 UTC
Last enriched: 09/12/2026, 00:57:10 UTC
Last updated: 09/12/2026, 00:57:10 UTC
Views: 2
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.