CVE-2026-68157
Received Received - Intake

libceph CRUSH Type Name Lookup Null Pointer Dereference

Publication date: 2026-08-10

Last updated on: 2026-08-10

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: libceph: guard missing CRUSH type name lookup Localized read selection can walk a parent bucket whose name exists in the CRUSH map while its type has no matching entry in type_names. get_immediate_parent() then dereferences a NULL type_cn and passes an invalid pointer into strcmp(), causing a null-ptr-deref. Skip such malformed parent buckets unless both the bucket name and type name metadata are present. This keeps malformed hierarchy data from crashing locality lookup and safely falls back to "not local". [ idryomov: add WARN_ON_ONCE ]

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-10
Last Modified
2026-08-10
Generated
2026-08-10
AI Q&A
2026-08-10
EPSS Evaluated
N/A
NVD
CVE-2026-68157
EUVD
EUVD-2026-55543

Affected Vendors & Products

Currently, no data is known.

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in the Linux kernel involves a missing guard in the CRUSH type name lookup during localized read selection. When a parent bucket's name exists in the CRUSH map but its type lacks a matching entry, the system dereferences a NULL pointer and passes an invalid pointer to strcmp(), causing a null-pointer dereference crash.

Impact Analysis

This vulnerability can cause system crashes due to null-pointer dereferences when processing malformed CRUSH map data. It may lead to denial-of-service conditions by disrupting read operations in systems using the Linux kernel's libceph component.

Mitigation Strategies

Update the Linux kernel to the latest patched version to resolve the libceph CRUSH type name lookup vulnerability. Monitor kernel logs for null pointer dereference errors related to ceph or CRUSH map operations.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-68157. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart