CVE-2026-89656 Linux kernel libceph - Out of Bounds Write

Linux kernel libceph contains an out-of-bounds write caused by mismatched CRUSH bucket ids in crush_decode(), letting attackers trigger memory corruption, exploit requires a malformed CRUSH map.

CVSS base score 9.8 /10
Critical
CISA KEV
Not listed
Public exploit
None known
EPSS
0.51% chance of exploitation in 30 days
View the NVD record ↗