7.5

CVE-2026-68157

libceph: guard missing CRUSH type name lookup

In the Linux kernel, the following vulnerability has been resolved:

libceph: guard missing CRUSH type name lookup

Localized read selection can walk a parent bucket whose name exists in
the CRUSH map while its type has no matching entry in type_names.
get_immediate_parent() then dereferences a NULL type_cn and passes an
invalid pointer into strcmp(), causing a null-ptr-deref.

Skip such malformed parent buckets unless both the bucket name and type
name metadata are present. This keeps malformed hierarchy data from
crashing locality lookup and safely falls back to "not local".

[ idryomov: add WARN_ON_ONCE ]
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version 117d96a04f007ce8fc2e292369056c3bd09f6f63
Version < cbfcba275326c8c7dae9acd8f4a0d4c316fdafb0
Status affected
Version 117d96a04f007ce8fc2e292369056c3bd09f6f63
Version < 8ff579ac03d6e9d17d6d9c8443110167c14a382d
Status affected
Version 117d96a04f007ce8fc2e292369056c3bd09f6f63
Version < 6a4b75d90f0cfbf22c14742ab35a803bc13f36ec
Status affected
Version 117d96a04f007ce8fc2e292369056c3bd09f6f63
Version < c46d82c47afc968d6ee8ef4470fa2dd35b765c21
Status affected
Version 117d96a04f007ce8fc2e292369056c3bd09f6f63
Version < 3767c9f0c1bbd98dd25cb088356a0fc6c1f09f50
Status affected
Version 117d96a04f007ce8fc2e292369056c3bd09f6f63
Version < 4716a64b7cc2797741f7be4e283ace78a9dff37d
Status affected
Version 117d96a04f007ce8fc2e292369056c3bd09f6f63
Version < db9cc9fd9660b2d69ee66f5a4cbec83c21a1c64d
Status affected
Version 117d96a04f007ce8fc2e292369056c3bd09f6f63
Version < bbeae12fda3384a90fbebc8a19ba9d33f85b5361
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 5.8
Status affected
Version 0
Version < 5.8
Status unaffected
Version <= 5.10.*
Version 5.10.265
Status unaffected
Version <= 5.15.*
Version 5.15.216
Status unaffected
Version <= 6.1.*
Version 6.1.183
Status unaffected
Version <= 6.6.*
Version 6.6.148
Status unaffected
Version <= 6.12.*
Version 6.12.101
Status unaffected
Version <= 6.18.*
Version 6.18.42
Status unaffected
Version <= 7.1.*
Version 7.1.6
Status unaffected
Version <= *
Version 7.2
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.69% 0.499
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
416baaa9-dc9f-4396-8d5f-8c081fb06d67 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/c46d82c47afc968d6ee8ef4470fa2dd35b765c21
https://git.kernel.org/stable/c/3767c9f0c1bbd98dd25cb088356a0fc6c1f09f50
https://git.kernel.org/stable/c/4716a64b7cc2797741f7be4e283ace78a9dff37d
https://git.kernel.org/stable/c/db9cc9fd9660b2d69ee66f5a4cbec83c21a1c64d
https://git.kernel.org/stable/c/bbeae12fda3384a90fbebc8a19ba9d33f85b5361
https://git.kernel.org/stable/c/6a4b75d90f0cfbf22c14742ab35a803bc13f36ec
https://git.kernel.org/stable/c/8ff579ac03d6e9d17d6d9c8443110167c14a382d
https://git.kernel.org/stable/c/cbfcba275326c8c7dae9acd8f4a0d4c316fdafb0