CVE-2026-68433

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An uninitialized memory read exists in the handle get version reply() function. The issue occurs because the function uses msg->front alloc len as the decode boundary for MON GET VERSION REPLY, which represents the size of the reused reply buffer rather than the actual bytes received. Consequently, a truncated reply may pass the ceph decode need() check and decode a second u64 value from stale tail bytes remaining in the buffer from a previous message.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.