CVE-2026-89650 Linux Kernel Ceph - Out-of-Bounds Read

Linux kernel Ceph component (info_v 2 and 3) contains an out-of-bounds read caused by missing bounds check on num_export_targets in ceph_mdsmap_decode(), letting malicious or compromised Ceph monitors trigger kernel memory read, exploit requires a malicious or compromised Ceph monitor or on-path attacker on unsigned messenger session.