CVE-2026-90042

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the ceph component where the ceph fname to usr() function fails to account for buffers allocated in the vmalloc() region. The fscrypt subsystem requires buffers to be in the linear mapping region; however, the messenger client uses kvmalloc() for message buffers, which may utilize the vmalloc() region during physical memory fragmentation. When raw messages from the MDS are passed to ceph fname to usr(), it can lead to system oopses, particularly on non-x86 platforms. This occurs because inappropriate addresses are passed to the fscrypt fname disk to usr() function.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.