Skip to content
CVE PROGRAM SOURCE RECORD9.8 Critical

CVE-2026-22984

libceph: prevent potential out-of-bounds reads in handle_auth_done()

Description

In the Linux kernel, the following vulnerability has been resolved: libceph: prevent potential out-of-bounds reads in handle_auth_done() Perform an explicit bounds check on payload_len to avoid a possible out-of-bounds access in the callout. [ idryomov: changelog ]

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • cd1a677cad994021b19665ed476aea63f5d54f31 to < 194cfe2af4d2a1de599d39dad636b47c2f6c2c96affected
  • cd1a677cad994021b19665ed476aea63f5d54f31 to < 79fe3511db416d2f2edcfd93569807cb02736e5eaffected
  • cd1a677cad994021b19665ed476aea63f5d54f31 to < ef208ea331ef688729f64089b895ed1b49e842e3affected
  • cd1a677cad994021b19665ed476aea63f5d54f31 to < 2802ef3380fa8c4a08cda51ec1f085b1a712e9e2affected
  • cd1a677cad994021b19665ed476aea63f5d54f31 to < 2d653bb63d598ae4b096dd678744bdcc34ee89e8affected
  • cd1a677cad994021b19665ed476aea63f5d54f31 to < 818156caffbf55cb4d368f9c3cac64e458fb49c9affected

Linux Linux

Default version status: affected

  • 5.11affected
  • 0 to < 5.11unaffected
  • 5.15.198 to ≤ 5.15.*unaffected
  • 6.1.161 to ≤ 6.1.*unaffected
  • 6.6.121 to ≤ 6.6.*unaffected
  • 6.12.66 to ≤ 6.12.*unaffected
  • 6.18.6 to ≤ 6.18.*unaffected
  • 6.19 to ≤ *unaffected

References