CVE-2026-68157: libceph: guard missing CRUSH type name lookup
In the Linux kernel, the following vulnerability has been resolved:
libceph: guard missing CRUSH type name lookup
Localized read selection can walk a parent bucket whose name exists in the CRUSH map while its type has no matching entry in typenames. getimmediateparent() then dereferences a NULL typecn and passes an invalid pointer into strcmp(), causing a null-ptr-deref.
Skip such malformed parent buckets unless both the bucket name and type name metadata are present. This keeps malformed hierarchy data from crashing locality lookup and safely falls back to "not local".
[ idryomov: add WARNONONCE ]
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-68157?
CVE-2026-68157 has been assigned a risk score of 27.
How do I fix CVE-2026-68157?
To mitigate CVE-2026-68157, update your Linux kernel to the latest patched version.
What systems are affected by CVE-2026-68157?
CVE-2026-68157 affects the Linux kernel, specifically in the libceph component.
What does CVE-2026-68157 vulnerability involve?
CVE-2026-68157 involves a missing guard that could lead to dereferencing a NULL pointer during CRUSH type name lookup.
When was CVE-2026-68157 published?
CVE-2026-68157 was published on August 10, 2026.