CVE-2026-89650 Linux CVE debrief

Who should care

Defenders responsible for Linux kernel infrastructure, particularly those managing ceph-based systems or exposed to untrusted or unsigned/unencrypted messenger sessions, should assess their exposure and prioritize patching.

Why it matters

This CRITICAL vulnerability in the Linux kernel's ceph module requires prompt attention from defenders to prevent potential exploitation. Affected systems should be identified and patched, with additional monitoring and inventory checks recommended.

• Verify and apply patches to prevent potential out-of-bounds reads
• Monitor for unusual activity related to CEPH_MSG_MDS_MAP messages
• Review and update inventory checks for affected Linux kernel versions

Technical summary

The `ceph_mdsmap_decode` function in the Linux kernel's ceph module does not properly check bounds when decoding num_export_targets from per-mds info records. This can lead to an out-of-bounds read when processing a malformed CEPH_MSG_MDS_MAP message from a monitor session, potentially leading to a slab-out-of-bounds read on x86_64 with KASAN. The issue is addressed in various Linux kernel commits. A malicious or compromised monitor, or an on-path attacker on an unsigned/unencrypted messenger session, can drive an out-of-bounds read in the client kernel.

Defensive priority

Defenders should prioritize verifying and applying patches for Linux kernel versions affected by this vulnerability, particularly those exposed to untrusted or unsigned/unencrypted messenger sessions.

Recommended defensive actions

• Verify Linux kernel versions for exposure and apply patches
• Review and update inventory checks for affected Linux kernel versions
• Monitor for unusual activity related to CEPH_MSG_MDS_MAP messages
• Perform vulnerability scanning to identify potentially affected systems
• Review system configurations for potential weaknesses
• Implement compensating controls for exposed systems
• Track patching and remediation efforts

Evidence notes

The CVE Program record and NVD vulnerability detail provide official information on this vulnerability. Supplemental sources include various Linux kernel commit references. The vulnerability is in the Linux kernel's ceph module, which requires patching to prevent potential out-of-bounds reads. Defenders should verify and apply patches for Linux kernel versions affected by this vulnerability, particularly those exposed to untrusted or unsigned/unencrypted messenger sessions. Evidence is limited to public CVE and NVD records, so further

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.