CVE-2026-68160

In the Linux kernel, the following vulnerability has been resolved: ceph: fix pre-auth out-of-bounds read on snaptrace in cephhandlecaps cephhandlecaps reads snaptracelen from the wire-format cephmdscaps header and uses it unconditionally to build a fake end pointer snaptrace + snaptracelen that ...

EUVD-2026-55546

In the Linux kernel, the following vulnerability has been resolved: ceph: fix pre-auth out-of-bounds read on snaptrace in cephhandlecaps cephhandlecaps reads snaptracelen from the wire-format cephmdscaps header and uses it unconditionally to build a fake end pointer snaptrace + snaptracelen that ...

CVE-2026-68160

Summary: CVE-2026-68160 is a pre-auth, out-of-bounds read vulnerability in the Linux kernel’s Ceph code path (ceph_handle_caps) caused by using attacker-controlled snap_trace_len to compute an end pointer without proper bounds checks. The issue can lead to out-of-bounds reads of encoded snap data...