EUVD-2026-55546

In the Linux kernel, the following vulnerability has been resolved: ceph: fix pre-auth out-of-bounds read on snaptrace in cephhandlecaps cephhandlecaps reads snaptracelen from the wire-format cephmdscaps header and uses it unconditionally to build a fake end pointer snaptrace + snaptracelen that ...

CVE-2026-68160

The CVE-2026-68160 vulnerability affects Ceph in the Linux kernel where ceph_handle_caps() reads snap_trace_len from the wire-format and uses it to compute snaptrace + snaptrace_len before validation. If msg->hdr.version is 1 (no decoder validation), an attacker-controlled snap_trace_len can d...