CVE-2026-68082

CVE-2026-68082: In the Linux kernel’s libceph code, decode_lockers() uses two unsafe bare decodes (ceph_decode_32(p) and ceph_decode_8(p)) that can read past the validated buffer, enabling a malicious OSD to influence the locker type and trigger slab-out-of-bounds reads. The fix replaces these wi...