Skip to content
Heist/ feed
High

libceph: guard missing CRUSH type name lookup

Type: advisorySource: Official CVE List1 source record

In the Linux kernel, the following vulnerability has been resolved: libceph: guard missing CRUSH type name lookup Localized read selection can walk a parent bucket whose name exists in the CRUSH map while its type has no matching entry in type_names. get_immediate_parent() then dereferences a NULL type_cn and passes an invalid pointer into strcmp(), causing a null-ptr-deref. Skip such malformed parent buckets unless both the bucket name and type name metadata are present. This keeps malformed hierarchy data from crashing locality lookup and safely falls back to "not local". [ idryomov: add WARN_ON_ONCE ]

Announced Source revision 1
Original source ↗

CVE-2026-68157

Primary source · Revision 1

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: cve:CVE-2026-68157

Linux

Source reference: /containers/cna/affected/0/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Linux

Source reference: /containers/cna/affected/1/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Structured affected-version data

Original package identities and version rules from this source.

[
  {
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "vendor": "Linux",
    "product": "Linux",
    "versions": [
      {
        "status": "affected",
        "version": "117d96a04f007ce8fc2e292369056c3bd09f6f63",
        "lessThan": "cbfcba275326c8c7dae9acd8f4a0d4c316fdafb0",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "117d96a04f007ce8fc2e292369056c3bd09f6f63",
        "lessThan": "8ff579ac03d6e9d17d6d9c8443110167c14a382d",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "117d96a04f007ce8fc2e292369056c3bd09f6f63",
        "lessThan": "6a4b75d90f0cfbf22c14742ab35a803bc13f36ec",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "117d96a04f007ce8fc2e292369056c3bd09f6f63",
        "lessThan": "c46d82c47afc968d6ee8ef4470fa2dd35b765c21",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "117d96a04f007ce8fc2e292369056c3bd09f6f63",
        "lessThan": "3767c9f0c1bbd98dd25cb088356a0fc6c1f09f50",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "117d96a04f007ce8fc2e292369056c3bd09f6f63",
        "lessThan": "4716a64b7cc2797741f7be4e283ace78a9dff37d",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "117d96a04f007ce8fc2e292369056c3bd09f6f63",
        "lessThan": "db9cc9fd9660b2d69ee66f5a4cbec83c21a1c64d",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "117d96a04f007ce8fc2e292369056c3bd09f6f63",
        "lessThan": "bbeae12fda3384a90fbebc8a19ba9d33f85b5361",
        "versionType": "git"
      }
    ],
    "programFiles": [
      "net/ceph/osdmap.c"
    ],
    "defaultStatus": "unaffected"
  },
  {
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "vendor": "Linux",
    "product": "Linux",
    "versions": [
      {
        "status": "affected",
        "version": "5.8"
      },
      {
        "status": "unaffected",
        "version": "0",
        "lessThan": "5.8",
        "versionType": "semver"
      },
      {
        "status": "unaffected",
        "version": "5.10.265",
        "versionType": "semver",
        "lessThanOrEqual": "5.10.*"
      },
      {
        "status": "unaffected",
        "version": "5.15.216",
        "versionType": "semver",
        "lessThanOrEqual": "5.15.*"
      },
      {
        "status": "unaffected",
        "version": "6.1.183",
        "versionType": "semver",
        "lessThanOrEqual": "6.1.*"
      },
      {
        "status": "unaffected",
        "version": "6.6.148",
        "versionType": "semver",
        "lessThanOrEqual": "6.6.*"
      },
      {
        "status": "unaffected",
        "version": "6.12.101",
        "versionType": "semver",
        "lessThanOrEqual": "6.12.*"
      },
      {
        "status": "unaffected",
        "version": "6.18.42",
        "versionType": "semver",
        "lessThanOrEqual": "6.18.*"
      },
      {
        "status": "unaffected",
        "version": "7.1.6",
        "versionType": "semver",
        "lessThanOrEqual": "7.1.*"
      },
      {
        "status": "unaffected",
        "version": "7.2",
        "versionType": "original_commit_for_fix",
        "lessThanOrEqual": "*"
      }
    ],
    "programFiles": [
      "net/ceph/osdmap.c"
    ],
    "defaultStatus": "affected"
  }
]
Related CVEs
CVE-2026-68157

Source reference: /cveMetadata/cveId

Publisher severity

high

Source reference: /containers/cna/metrics

Event
#41143 · Revision 1
Added to Heist Feed
Publisher date
Read the original announcement