CVE-2026-68157

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in libceph where localized read selection can process a parent bucket that has a name in the CRUSH map but lacks a corresponding entry in type names. This leads to the get immediate parent() function dereferencing a NULL type cn and passing an invalid pointer into strcmp(), resulting in a null-ptr-deref (a condition where the system attempts to read from a memory address that is null, typically causing a crash).

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.