Skip to content
CVE PROGRAM SOURCE RECORD9.1 Critical

CVE-2026-43406

libceph: prevent potential out-of-bounds reads in process_message_header()

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: libceph: prevent potential out-of-bounds reads in process_message_header() If the message frame is (maliciously) corrupted in a way that the length of the control segment ends up being less than the size of the message header or a different frame is made to look like a message frame, out-of-bounds reads may ensue in process_message_header(). Perform an explicit bounds check before decoding the message header.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • cd1a677cad994021b19665ed476aea63f5d54f31 to < 76ccf21a12c5f6d6790bc32c7da82446d877b2f4affected
  • cd1a677cad994021b19665ed476aea63f5d54f31 to < 75582aaa580c11aed4c7731cad6b068b700e7efbaffected
  • cd1a677cad994021b19665ed476aea63f5d54f31 to < 50156622eb0888e62541d715a98584480a1bc7cbaffected
  • cd1a677cad994021b19665ed476aea63f5d54f31 to < dbd857a9e1e33ea71eaf3e211877027e533770d1affected
  • cd1a677cad994021b19665ed476aea63f5d54f31 to < 69fe5af33fa3806f398d21c081d73c66e5523bc2affected
  • cd1a677cad994021b19665ed476aea63f5d54f31 to < 035867ae6f18df0aeedb2a57a5b74091bd4e3fe8affected
  • cd1a677cad994021b19665ed476aea63f5d54f31 to < 69fb5d91bba44ecf7eb80530b85fa4fb028921d5affected

Linux Linux

Default version status: affected

  • 5.11affected
  • 0 to < 5.11unaffected
  • 5.15.203 to ≤ 5.15.*unaffected
  • 6.1.167 to ≤ 6.1.*unaffected
  • 6.6.130 to ≤ 6.6.*unaffected
  • 6.12.78 to ≤ 6.12.*unaffected
  • 6.18.19 to ≤ 6.18.*unaffected
  • 6.19.9 to ≤ 6.19.*unaffected
  • 7.0 to ≤ *unaffected

References