Unity Linux 20.1070a Security Update: kernel (UTSA-2026-146328)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146328 advisory. In the Linux kernel, the following vulnerability has been resolved: libceph: fix OOB read in decodewatchers via missing bounds check cephstartdecoding validates that...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-143091)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-143091 advisory. In the Linux kernel, the following vulnerability has been resolved: libceph: fix two unsafe bare decodes in decodelockers decodelockers in clslockclient.c contains t...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-142676)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142676 advisory. In the Linux kernel, the following vulnerability has been resolved: libceph: fix multiple unsafe decodes in decodelocker decodelocker in clslockclient.c contains thr...

Unity Linux 20.1020e / 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-142688)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142688 advisory. In the Linux kernel, the following vulnerability has been resolved: libceph: fix multiple unsafe decodes in decodelocker decodelocker in clslockclient.c contains thr...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-143093)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-143093 advisory. In the Linux kernel, the following vulnerability has been resolved: libceph: reject zero bucket types in crushdecode CRUSH bucket type 0 is reserved for devices. The...

Unity Linux 20.1020e / 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-142547)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142547 advisory. In the Linux kernel, the following vulnerability has been resolved: libceph: fix two unsafe bare decodes in decodelockers decodelockers in clslockclient.c contains t...

Wireshark 1.12.x < 1.12.4 Multiple Vulnerabilities (macOS)

The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 1.12.4. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-1.12.4 advisory. - Integer overflow in the dissectosd2cdbcontinuation function in epan/dissectors/packet-scsi-osd.c in t...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: libceph: Two unsafe bare decode operations in decodelockers were fixed. The decodelockers function in clslockclient.c contains two bare decode operations that allow a malicious or compromised OSD to trigger a slab-out-of-bound...

Rocky Linux 9 [CIQ] Security Update: kernel / kernel-64k / kernel-64k-core / kernel-64k-debug / etc Multiple Vulnerabilities (crlsa-2026_13565)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202613565 advisory. kernel: Linux kernel: Denial of Service in libceph OSD client due to unreset sparse-read state CVE-2026-23136 kernel: Linux kernel: Use-after-free in...

Rocky Linux 9 [CIQ] Security Update: kernel / kernel-64k / kernel-64k-core / kernel-64k-debug / etc Multiple Vulnerabilities (crxsa-2026_13565)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crxsa-202613565 advisory. kernel: Linux kernel: Denial of Service in libceph OSD client due to unreset sparse-read state CVE-2026-23136 kernel: Linux kernel: Use-after-free in...

kernel: Linux kernel: Denial of Service in libceph OSD client due to unreset sparse-read state

A flaw was found in the Linux kernel's libceph OSD client. When a connection fault occurs during a sparse read, the sparse-read state is not properly reset. This allows a misbehaving or compromised Ceph OSD server, or a network adversary, to disrupt traffic. As a result, the client can misinterpr...

Linux Distros Unpatched Vulnerability : CVE-2026-89657

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libceph: validate OSD extent maps before cursor advance net/ceph/osdclient.c:osdsparseread validates that the sparse-read data length matches the summed extent...

DEBIAN-CVE-2026-89657

In the Linux kernel, the following vulnerability has been resolved: libceph: validate OSD extent maps before cursor advance net/ceph/osdclient.c:osdsparseread validates that the sparse-read data length matches the summed extent lengths, but it does not validate that each OSD-supplied extent is...

AZL-100554 CVE-2026-89657 affecting package kernel for versions less than 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: libceph: validate OSD extent maps before cursor advance net/ceph/osdclient.c:osdsparseread validates that the sparse-read data length matches the summed extent lengths, but it does not validate that each OSD-supplied extent is...

UBUNTU-CVE-2026-89657

In the Linux kernel, the following vulnerability has been resolved: libceph: validate OSD extent maps before cursor advance net/ceph/osdclient.c:osdsparseread validates that the sparse-read data length matches the summed extent lengths, but it does not validate that each OSD-supplied extent is...

CVE-2026-89657

CVE-2026-89657 affects the Linux kernel libceph subsystem, specifically osd_sparse_read() in net/ceph/osd_client.c . The function validates that sparse-read data length matches summed extent lengths but fails to verify each OSD-supplied extent is monotonic and within the original request range. A...

EUVD-2026-76569

In the Linux kernel, the following vulnerability has been resolved: libceph: validate OSD extent maps before cursor advance net/ceph/osdclient.c:osdsparseread validates that the sparse-read data length matches the summed extent lengths, but it does not validate that each OSD-supplied extent is...

CVE-2026-89657 libceph: validate OSD extent maps before cursor advance

In the Linux kernel, the following vulnerability has been resolved: libceph: validate OSD extent maps before cursor advance net/ceph/osdclient.c:osdsparseread validates that the sparse-read data length matches the summed extent lengths, but it does not validate that each OSD-supplied extent is...

CVE-2026-89657 libceph: validate OSD extent maps before cursor advance

In the Linux kernel, the following vulnerability has been resolved: libceph: validate OSD extent maps before cursor advance net/ceph/osdclient.c:osdsparseread validates that the sparse-read data length matches the summed extent lengths, but it does not validate that each OSD-supplied extent is...

CVE-2026-89657

In the Linux kernel, the following vulnerability has been resolved: libceph: validate OSD extent maps before cursor advance net/ceph/osdclient.c:osdsparseread validates that the sparse-read data length matches the summed extent lengths, but it does not validate that each OSD-supplied extent is...