Description
In the Linux kernel, the following vulnerability has been resolved: libceph: replace overzealous BUG_ON in osdmap_apply_incremental() If the osdmap is (maliciously) corrupted such that the incremental osdmap epoch is different from what is expected, there is no need to BUG. Instead, just declare the incremental osdmap to be invalid.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
f24e9980eb860d8600cbe5ef3d2fd9295320d229 to < 9aa0b0c14cefece078286d78b97d4c09685e372daffectedf24e9980eb860d8600cbe5ef3d2fd9295320d229 to < 4b106fbb1c7b841cd402abd83eb2447164c799eaaffectedf24e9980eb860d8600cbe5ef3d2fd9295320d229 to < 6afd2a4213524bc742b709599a3663aeaf77193caffectedf24e9980eb860d8600cbe5ef3d2fd9295320d229 to < d3613770e2677683e65d062da5e31f48c409abe9affectedf24e9980eb860d8600cbe5ef3d2fd9295320d229 to < 6c6cec3db3b418c4fdf815731bc39e46dff75e1baffectedf24e9980eb860d8600cbe5ef3d2fd9295320d229 to < 6348d70af847b79805374fe628d3809a63fd7df3affectedf24e9980eb860d8600cbe5ef3d2fd9295320d229 to < e00c3f71b5cf75681dbd74ee3f982a99cb690c2baffected
Linux Linux
Default version status: affected
2.6.34affected0 to < 2.6.34unaffected5.10.248 to ≤ 5.10.*unaffected5.15.198 to ≤ 5.15.*unaffected6.1.161 to ≤ 6.1.*unaffected6.6.121 to ≤ 6.6.*unaffected6.12.66 to ≤ 6.12.*unaffected6.18.6 to ≤ 6.18.*unaffected6.19 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/9aa0b0c14cefece078286d78b97d4c09685e372d ↗
- https://git.kernel.org/stable/c/4b106fbb1c7b841cd402abd83eb2447164c799ea ↗
- https://git.kernel.org/stable/c/6afd2a4213524bc742b709599a3663aeaf77193c ↗
- https://git.kernel.org/stable/c/d3613770e2677683e65d062da5e31f48c409abe9 ↗
- https://git.kernel.org/stable/c/6c6cec3db3b418c4fdf815731bc39e46dff75e1b ↗
- https://git.kernel.org/stable/c/6348d70af847b79805374fe628d3809a63fd7df3 ↗
- https://git.kernel.org/stable/c/e00c3f71b5cf75681dbd74ee3f982a99cb690c2b ↗