CVE-2026-89656

In the Linux kernel, the following vulnerability has been resolved: libceph: reject buckets with mismatched CRUSH ids crushdecode stores bucket data by array slot, and the mapper later derives the per-bucket workspace index from the decoded bucket id. A malformed map can therefore make one bucket...

CVE-2026-89656

CVE-2026-89656 affects the libceph subsystem of the Linux kernel . The vulnerability resides in crush_decode() , which stores CRUSH bucket data by array slot. A malformed CRUSH map can encode a bucket id that does not match its array slot, causing the mapper to alias one bucket into another's wor...