Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100715)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100715 advisory. In the Linux kernel, the following vulnerability has been resolved: libceph: Fix potential null-ptr-deref in decodechooseargs A message of type CEPHMSGOSDMAP contain...

CVE-2026-52957

In the Linux kernel, the following vulnerability has been resolved: libceph: Fix potential null-ptr-deref in decodechooseargs A message of type CEPHMSGOSDMAP contains an OSD map that itself contains a CRUSH map. When decoding this CRUSH map in crushdecode, an array of maxbuckets CRUSH buckets is...

CVE-2026-46024

In the Linux kernel, the following vulnerability has been resolved: libceph: Prevent potential null-ptr-deref in cephhandleauthreply If a message of type CEPHMSGAUTHREPLY contains a zero value for both protocol and result, this is currently not treated as an error. In case of ac-negotiating == tr...

CVE-2026-43407

A flaw was found in the libceph component of the Linux kernel. A remote attacker could send a specially crafted CEPHMSGAUTHREPLY message with a large payloadlen value. This could lead to an integer overflow, causing an out-of-bounds memory access. This vulnerability could result in memory...