CVE-2026-68158

A flaw was found in libceph within the Linux kernel. A remote attacker could send a maliciously crafted CEPHMSGOSDMAP message, leading to a multiplication overflow in the decodenewupstateweight function. This overflow causes an incorrect bounds check, which may result in out-of-bounds memory read...