CVE-2026-89653
Critical
Description
In the Linux kernel, the following vulnerability has been resolved: ceph: reject export_targets ranks >= CEPH_MAX_MDS in mdsmap decode MDSMap export_targets entries are monitor controlled. check_new_map() uses each entry as a bit number in a fixed stack bitmap, so a rank outside the protocol namespace can make set_bit() write past the end of the array. Reject ranks outside CEPH_MAX_MDS while decoding the map. Do not validate against possible_max_rank here because maps may legitimately reference ranks beyond a temporarily reduced max_mds.
SeverityCritical
CVSS9.8
Exploit probability—
Product
Linux
PublishedSep 11, 2026
First seenSep 11, 2026
How to fix
Update
- Linux Linux3740c88ca9cb2210a8dbdd55ea4cec119fbe86fe, 8c823bbab3c24e657469a84db96902ba82d4e8bb, c4addccd05bacbef2144b4db14853d0308a218ac, 736adee11af36e407ed902264f8b2fb5cf94b62f, 4d298880f82c42383b36946bafde7ccf4d804c9b, 96c3f5fbb0d5386e7111426f047f98cec4586674, aedc9053d909508a5f56c3f49f885fc030df4730 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | d517b3983dd3106ca92d6c5d0d09415a4a09481c ≤ v < 3740c88ca9cb2210a8dbdd55ea4cec119fbe86fe, d517b3983dd3106ca92d6c5d0d09415a4a09481c ≤ v < 8c823bbab3c24e657469a84db96902ba82d4e8bb, d517b3983dd3106ca92d6c5d0d09415a4a09481c ≤ v < c4addccd05bacbef2144b4db14853d0308a218ac, d517b3983dd3106ca92d6c5d0d09415a4a09481c ≤ v < 736adee11af36e407ed902264f8b2fb5cf94b62f, d517b3983dd3106ca92d6c5d0d09415a4a09481c ≤ v < 4d298880f82c42383b36946bafde7ccf4d804c9b, d517b3983dd3106ca92d6c5d0d09415a4a09481c ≤ v < 96c3f5fbb0d5386e7111426f047f98cec4586674, d517b3983dd3106ca92d6c5d0d09415a4a09481c ≤ v < aedc9053d909508a5f56c3f49f885fc030df4730, 5.15 | 3740c88ca9cb2210a8dbdd55ea4cec119fbe86fe, 8c823bbab3c24e657469a84db96902ba82d4e8bb, c4addccd05bacbef2144b4db14853d0308a218ac, 736adee11af36e407ed902264f8b2fb5cf94b62f, 4d298880f82c42383b36946bafde7ccf4d804c9b, 96c3f5fbb0d5386e7111426f047f98cec4586674, aedc9053d909508a5f56c3f49f885fc030df4730 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.