Skip to content
CVE PROGRAM SOURCE RECORD9.8 Critical

CVE-2026-43304

libceph: define and enforce CEPH_MAX_KEY_LEN

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: libceph: define and enforce CEPH_MAX_KEY_LEN When decoding the key, verify that the key material would fit into a fixed-size buffer in process_auth_done() and generally has a sane length. The new CEPH_MAX_KEY_LEN check replaces the existing check for a key with no key material which is a) not universal since CEPH_CRYPTO_NONE has to be excluded and b) doesn't provide much value since a smaller than needed key is just as invalid as no key -- this has to be handled elsewhere anyway.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • cd1a677cad994021b19665ed476aea63f5d54f31 to < 6405e8c680974bb74e2c98d5249fb52c7b12a6c6affected
  • cd1a677cad994021b19665ed476aea63f5d54f31 to < 8d745d38c88ecbed95f6b2b39857bf89f35a3244affected
  • cd1a677cad994021b19665ed476aea63f5d54f31 to < e1dc45d97975f9db65694d234fbddf1915176e16affected
  • cd1a677cad994021b19665ed476aea63f5d54f31 to < 1b275bd49e58752efb83767a5d1aed41356c5e64affected
  • cd1a677cad994021b19665ed476aea63f5d54f31 to < c1a0f5f1e5e7e98c36a362ec3d1fcfd9932931edaffected
  • cd1a677cad994021b19665ed476aea63f5d54f31 to < d82467c07b03a27c3c5469b62bb3b726305a80bbaffected
  • cd1a677cad994021b19665ed476aea63f5d54f31 to < ac431d597a9bdfc2ba6b314813f29a6ef2b4a3bfaffected

Linux Linux

Default version status: affected

  • 5.11affected
  • 0 to < 5.11unaffected
  • 5.15.202 to ≤ 5.15.*unaffected
  • 6.1.165 to ≤ 6.1.*unaffected
  • 6.6.128 to ≤ 6.6.*unaffected
  • 6.12.75 to ≤ 6.12.*unaffected
  • 6.18.16 to ≤ 6.18.*unaffected
  • 6.19.6 to ≤ 6.19.*unaffected
  • 7.0 to ≤ *unaffected

References