CVE-2026-89653

This vulnerability affects the Linux kernel's Ceph filesystem (ceph) MDSMap decode path . The check_new_map() function uses monitor-controlled export_targets entries as bit numbers in a fixed stack bitmap. A rank value at or above CEPH_MAX_MDS causes set_bit() to write past the end of the array, ...