CVE-2026-68131

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the RBD (RADOS Block Device) component where the rbd object map callback() function fails to reset positive result codes to zero during an object map update. In RBD request reply messages, a positive result code indicates a data payload, which is prohibited for write operations. A corrupted reply to an object map update can pass a positive result code through rbd obj handle request() to rbd obj handle request(). Because rbd obj advance write() does not change this code, it triggers an assertion failure in rbd obj handle request() when the if(done && *result) branch is executed.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.