CVE-2026-68157

High

Description

In the Linux kernel, the following vulnerability has been resolved: libceph: guard missing CRUSH type name lookup Localized read selection can walk a parent bucket whose name exists in the CRUSH map while its type has no matching entry in type_names. get_immediate_parent() then dereferences a NULL type_cn and passes an invalid pointer into strcmp(), causing a null-ptr-deref. Skip such malformed parent buckets unless both the bucket name and type name metadata are present. This keeps malformed hierarchy data from crashing locality lookup and safely falls back to "not local". [ idryomov: add WARN_ON_ONCE ]

SeverityHigh

CVSS7.5

Exploit probability—

Product

Linux

PublishedAug 10, 2026

First seenAug 10, 2026

Weakness typeCWE-476NULL pointer dereference

How to fix

Update

Linux Linuxcbfcba275326c8c7dae9acd8f4a0d4c316fdafb0, 8ff579ac03d6e9d17d6d9c8443110167c14a382d, 6a4b75d90f0cfbf22c14742ab35a803bc13f36ec, c46d82c47afc968d6ee8ef4470fa2dd35b765c21, 3767c9f0c1bbd98dd25cb088356a0fc6c1f09f50, 4716a64b7cc2797741f7be4e283ace78a9dff37d, db9cc9fd9660b2d69ee66f5a4cbec83c21a1c64d, bbeae12fda3384a90fbebc8a19ba9d33f85b5361 or later

Affected products

Product	Affected versions	Fixed in
Linux Linux	117d96a04f007ce8fc2e292369056c3bd09f6f63 ≤ v < cbfcba275326c8c7dae9acd8f4a0d4c316fdafb0, 117d96a04f007ce8fc2e292369056c3bd09f6f63 ≤ v < 8ff579ac03d6e9d17d6d9c8443110167c14a382d, 117d96a04f007ce8fc2e292369056c3bd09f6f63 ≤ v < 6a4b75d90f0cfbf22c14742ab35a803bc13f36ec, 117d96a04f007ce8fc2e292369056c3bd09f6f63 ≤ v < c46d82c47afc968d6ee8ef4470fa2dd35b765c21, 117d96a04f007ce8fc2e292369056c3bd09f6f63 ≤ v < 3767c9f0c1bbd98dd25cb088356a0fc6c1f09f50, 117d96a04f007ce8fc2e292369056c3bd09f6f63 ≤ v < 4716a64b7cc2797741f7be4e283ace78a9dff37d, 117d96a04f007ce8fc2e292369056c3bd09f6f63 ≤ v < db9cc9fd9660b2d69ee66f5a4cbec83c21a1c64d, 117d96a04f007ce8fc2e292369056c3bd09f6f63 ≤ v < bbeae12fda3384a90fbebc8a19ba9d33f85b5361, 5.8	cbfcba275326c8c7dae9acd8f4a0d4c316fdafb0, 8ff579ac03d6e9d17d6d9c8443110167c14a382d, 6a4b75d90f0cfbf22c14742ab35a803bc13f36ec, c46d82c47afc968d6ee8ef4470fa2dd35b765c21, 3767c9f0c1bbd98dd25cb088356a0fc6c1f09f50, 4716a64b7cc2797741f7be4e283ace78a9dff37d, db9cc9fd9660b2d69ee66f5a4cbec83c21a1c64d, bbeae12fda3384a90fbebc8a19ba9d33f85b5361

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.