CVE-2026-68157

In the Linux kernel, the following vulnerability has been resolved: libceph: guard missing CRUSH type name lookup Localized read selection can walk a parent bucket whose name exists in the CRUSH map while its type has no matching entry in typenames. getimmediateparent then dereferences a NULL...

CVE-2026-68157

CVE-2026-68157 affects the Linux kernel’s libceph CRUSH processing. When a malformed CRUSH map contains a parent bucket with a name but without a matching type, get_immediate_parent() dereferences a NULL type_cn and passes a NULL into strcmp(), causing a null-ptr-deref and potential system crash ...

CVE-2026-68157 libceph: guard missing CRUSH type name lookup

In the Linux kernel, the following vulnerability has been resolved: libceph: guard missing CRUSH type name lookup Localized read selection can walk a parent bucket whose name exists in the CRUSH map while its type has no matching entry in typenames. getimmediateparent then dereferences a NULL...