A critical vulnerability in the Linux kernel's libceph component involves improper validation of key length during decoding. The flaw was addressed by defining and enforcing a maximum key length (CEPH_MAX_KEY_LEN) to ensure key material fits within a fixed-size buffer and has a valid length. This replaces a previous insufficient check that only verified the presence of key material, which did not adequately prevent invalid key lengths.