CVE-2026-89649 | Linux Kernel up to 6.12.108/6.18.49/7.2.3 Ceph __build_xattrs val_len out-of-bounds

A vulnerability has been found in Linux Kernel up to 6.12.108/6.18.49/7.2.3 and classified as problematic. Affected by this vulnerability is the function __build_xattrs of the component Ceph. The manipulation of the argument val_len leads to out-of-bounds read.

This vulnerability is uniquely identified as CVE-2026-89649. The attack is possible to be carried out remotely. No exploit exists.

The affected component should be upgraded.VulDB Recent EntriesRead More