CVE-2026-52954

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the libceph component where the decode choose args() function fails to properly handle errors during rbtree insertion. When processing a CEPH MSG OSD MAP message containing a CRUSH map, the system decodes crush choose arg maps using the choose args index as a key for the choose args rbtree. If a corrupted message contains two maps with the same index, the insert choose arg map() function triggers a kernel BUG due to a failed assertion.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.