CVE-2026-68155

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in libceph where the system fails to reject monmaps that advertise zero monitors. A monmap, sent from a monitor to the client via a CEPH MSG MON MAP message, contains information about the cluster's monitors. Because it is impossible for a cluster to have zero monitors while still sending a valid monmap, such a map is considered corrupted. Processing a monmap with a monitor count of zero can cause the client to crash during the open session() process, as it triggers a BUG ON assertion within the pick new mon() function. The flaw is addressed by updating the ceph monmap decode() function to reject monmaps where the num mon variable is equal to zero.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.