CVE-2026-68159

The CVE-Covered issue affects the Linux kernel’s libceph decoding of pg_temp/pg_upmap entries. __decode_pg_temp() decodes a user-controlled length but previously did not bound it to CEPH_PG_MAX_SIZE, allowing potential stack-out-of-bounds writes when an OSDMap contains a long pg_temp/pg_upmap ent...