U.S. flag   An official website of the United States government
Dot gov

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Https

Secure .gov websites use HTTPS
A lock (Dot gov) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.

National Vulnerability Database

National Vulnerability Database

NVD

National Vulnerability Database
  1. Vulnerabilities

CVE-2026-68156 Detail

Description

In the Linux kernel, the following vulnerability has been resolved: libceph: refresh auth->authorizer_buf{,_len} after authorizer update ceph_x_create_authorizer() caches au->buf->vec.iov_base and au->buf->vec.iov_len in struct ceph_auth_handshake. These cached values are then used by the messenger connect code when sending the authorizer. ceph_x_update_authorizer() can rebuild the authorizer when a newer service ticket is available. If the rebuilt authorizer no longer fits in the existing buffer, ceph_x_build_authorizer() drops its reference to au->buf and allocates a new one. If this is the final reference, ceph_buffer_put() frees the old ceph_buffer and its vec.iov_base, but auth->authorizer_buf still points at that freed memory. A subsequent msgr1 reconnect can therefore queue the stale pointer and trigger a KASAN slab-use-after-free in _copy_from_iter() while tcp_sendmsg() copies the authorizer. Refresh auth->authorizer_buf and auth->authorizer_buf_len after a successful authorizer rebuild so the messenger sends the current buffer.


Metrics

 
NVD enrichment efforts reference publicly available information to associate vector strings. CVSS information contributed by other sources is also displayed.
CVSS 4.0 Severity and Vector Strings:

NIST CVSS score
NIST: NVD
N/A
NVD assessment not yet provided.

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to [email protected].

URL Source(s) Tag(s)
https://git.kernel.org/stable/c/0060ec912292a550198d8d18ac95b433c92a7091 kernel.org
https://git.kernel.org/stable/c/2334e9997308305ee4fd508fdfe6086c4150ed60 kernel.org
https://git.kernel.org/stable/c/26f814187abceee90dbb29a02133adb4786fbb13 kernel.org
https://git.kernel.org/stable/c/5ecfcd5c05866f185357700b81b461dae4f5ebb2 kernel.org
https://git.kernel.org/stable/c/75e82e8944ac1efe9fdb88bd2f14d9a031282bdf kernel.org
https://git.kernel.org/stable/c/79a273df64238a4ade8b709689a78589f755b8ef kernel.org
https://git.kernel.org/stable/c/937d61f86d377a3aa578adae7a3dfcecdddf9d89 kernel.org
https://git.kernel.org/stable/c/9d37aec9ffe4e743dabc3f84502e9723e17a30d4 kernel.org

Weakness Enumeration

CWE-ID CWE Name Source

Change History

4 change records found show changes

Quick Info

CVE Dictionary Entry:
CVE-2026-68156
NVD Published Date:
08/10/2026
NVD Last Modified:
08/19/2026
Source:
kernel.org