3695 matches found
PT-2026-90369
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ceph component where the check new map function uses entries from export targets as bit numbers in a fixed stack bitmap. Because these entries are monitor...
PT-2026-96447
In the Linux kernel, the following vulnerability has been resolved: ceph: reject export targets ranks = CEPH MAX MDS in mdsmap decode MDSMap export targets entries are monitor controlled. check new map uses each entry as a bit number in a fixed stack bitmap, so a rank outside the protocol namespa...
CVE-2026-89649: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: ceph: bound xattr value length in buildxattrs buildxattrs decodes the MDS-supplied xattr blob one attribute at a time. For each attribute it reads a 32-bit name length, advances past the name bytes, reads a 32-bit value length,...
Linux Kernel Security Vulnerabilities
The Linux kernel version 5.1 contains a security vulnerability. This vulnerability stems from the ceph filesystem’s cephcapreclaimwork function, which repeatedly requeues itself when cephtrimdentries returns -EAGAIN, creating a busy loop and leading to exhaustion of CPU resources...
MGASA-2026-0389 Updated ceph packages fix security vulnerabilities
Updated ceph packages fix various security issues allowing authentication bypasses to gain admin privileges on the OSD, MDS, and MGR services. Notice that some of the fixes require kernel support for aes256k introduced in kernel 7. This update will not break installs using the old and insecure AE...
Updated ceph packages fix security vulnerabilities
Updated ceph packages fix various security issues allowing authentication bypasses to gain admin privileges on the OSD, MDS, and MGR services. Notice that some of the fixes require kernel support for aes256k introduced in kernel 7. This update will not break installs using the old and insecure AE...
Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053338)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053338 advisory. In the Linux kernel, the following vulnerability has been resolved: ceph: only dadd negative dentries when they are unhashed Ceph can call dadddentry, NULL on a...
Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053239)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053239 advisory. In the Linux kernel, the following vulnerability has been resolved: ceph: remove the incorrect Fw reference check when dirtying pages When doing the direct-io reads ...
Linux kernel decode_choose_args Heap Buffer Overflow DoS
The vulnerability of the decodechooseargs function in the net/ceph/osdmap.c module, which is responsible for implementing networking functions of the Linux kernel, is related to an uncontrolled and exploitable condition. Exploiting this vulnerability could allow a malicious actor to cause service...
Linux net/ceph/osdmap crush_decode Heap Buffer Overflow
The vulnerability of the crushdecode function in the net/ceph/osdmap.c module of the Linux kernel is related to incorrect assumptions regarding the organization of data or memory. Exploiting this vulnerability can allow a remote attacker to compromise the confidentiality, integrity, and...
Linux kernel decode_choose_args Heap Buffer Overflow DoS
The vulnerability of the decodechooseargs function in the net/ceph/osdmap.c module, which is part of the networking functions of the Linux kernel, stems from an improper check of the specified index, position, or offset in the input data. Exploiting this vulnerability could allow a malicious acto...
Linux kernel osdmap_decode Heap Buffer Overflow DoS
The vulnerability of the osdmapdecode function in the net/ceph/osdmap.c module, which is part of the Linux kernel’s networking functions, is related to incorrect input of configuration data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain access to protected...
Linux Kernel Heap Buffer Overflow DoS
The vulnerability of the cephxdecrypt function in the net/ceph/authx.c module, which is part of the networking functions in the Linux kernel, relates to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a remote attacker to cause service...
BIT-CEPH-2026-54330 Ceph RGW SigV4 handler accepts unsigned x-amz-* headers on presigned requests, allowing privilege escalation
Ceph is an open-source distributed storage platform providing object, block, and file storage. In versions prior to 20.2.4 and 19.2.6, the Ceph Object Gateway RGW SigV4 handler does not reject requests that carry x-amz- headers absent from the signed header set, allowing anyone holding a presigne...
BIT-CEPH-2026-50152 Ceph Monitor subscription handler improperly authorizes config-key store reads, exposing cluster secrets to read-only users
Ceph is an open-source distributed storage platform providing object, block, and file storage. In versions prior to 20.2.4 and 19.2.6, the Monitor subscription handler fails to properly authorize access to the configuration-key store, allowing any CephX user with only mon allow r capabilities to...
BIT-CEPH-2026-39944 Ceph: CephX AES Authentication error
Ceph is an open-source distributed storage platform providing object, block, and file storage. In versions prior to 20.2.4 and 19.2.6, the RADOS Gateway RGW protects STS session tokens with an AES-128-CBC handler that provides no message authentication, allowing an attacker who holds any valid ST...
BIT-CEPH-2025-30156 Ceph: AES-CBC misuse in CephX and RADOSGW enables authentication bypass and credential forgery
Ceph is an open-source distributed storage platform providing object, block, and file storage. In versions prior to 20.2.4 and 19.2.6, the CephX authentication protocol encrypts tickets with AES-128-CBC in an unauthenticated mode that uses a hard-coded initialization vector and no message...
Important: Red Hat Security Advisory: Red Hat Ceph Storage
A new version of Red Hat build of Ceph Storage has been released The Red Hat Storage Ceph container images are based on the latest ubi9 base image and Ceph 8.1. This release updates to the latest version...
OESA-2026-3531 kernel security update
The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: ceph: fix pre-auth out-of-bounds read on snaptrace in cephhandlecaps cephhandlecaps reads snaptracelen from the wire-format cephmdscaps header and uses it...
CVE-2026-50152
Ceph is an open-source distributed storage platform providing object, block, and file storage. In versions prior to 20.2.4 and 19.2.6, the Monitor subscription handler fails to properly authorize access to the configuration-key store, allowing any CephX user with only mon allow r capabilities to...