CVE-2026-52957

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the libceph component where a null pointer dereference can occur in the decode choose args() function. This happens when processing a CEPH MSG OSD MAP message containing a CRUSH map. During the decoding of a crush choose arg map, the system reads a bucket index from the incoming message. While the system verifies that the index does not exceed max buckets, it fails to check if the index points to a NULL bucket. A corrupted message containing such a bucket index can trigger a null pointer dereference when the system attempts to access the bucket.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.