CVE-2026-89653

A vulnerability in the Linux kernel's Ceph filesystem allows an out-of-bounds write during MDSMap decoding. The MDSMap export_targets entries are monitor-controlled , and the check_new_map() function uses each entry as a bit number in a fixed stack bitmap. A rank value ≥ CEPH_MAX_MDS causes set_b...