CVE-2026-89657

CVE-2026-89657 is a vulnerability in the Linux kernel's libceph client (net/ceph/osd_client.c). The function osd_sparse_read() validates that sparse-read data length matches summed extent lengths but fails to verify that each OSD-supplied extent is monotonic and within the original request range....