CVE-2026-23201

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A flaw exists in the Linux kernel's Ceph implementation where an invalid pointer is passed to the kfree() function within the parse longname() function. This occurs when reading Ceph snapshot directories, such as by running ls /mnt/my ceph/.snap, leading to a kernel oops. The issue arises because a pointer is advanced incorrectly before being passed to kfree(), resulting in the function operating on invalid memory. Reproducing the issue involves creating Ceph snapshots, mounting the Ceph filesystem, and then listing the snapshots using the ls command.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.