CVE-2026-52956

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An out-of-bounds memory access exists in the ceph x decrypt() function within libceph. The issue occurs because a portion of buffer p is interpreted as a ceph x encrypt header and its magic field is accessed without verifying if the buffer is large enough to hold the structure. Specifically, when the ciphertext len parameter is 8 or less, such as in a FRAME TAG AUTH REPLY MORE message frame, the system may access memory outside the allocated bounds.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.