Linux kernel decode_choose_args Heap Buffer Overflow DoS

The vulnerability of the decodechooseargs function in the net/ceph/osdmap.c module, which is part of the networking functions of the Linux kernel, stems from an improper check of the specified index, position, or offset in the input data. Exploiting this vulnerability could allow a malicious acto...

CVE-2026-52958 libceph: Fix potential out-of-bounds access in osdmap_decode()

In the Linux kernel, the following vulnerability has been resolved: libceph: Fix potential out-of-bounds access in osdmapdecode When decoding osdstate and osdweight from an incoming osdmap in osdmapdecode, both are decoded for each osd, i.e., map-maxosd times. The cephdecodeneed check only accoun...

Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP5 kernel was updated to fix various security issues The following security issues were fixed: CVE-2024-26584: net/tls: return ENOTSUPP on tlsinit bsc1220186. CVE-2025-38234: sched/rt: Fix race in pushrttask bsc1246057. CVE-2025-39759: btrfs: qgroup: fix race between...

Linux osdmap_apply_incremental Heap Buffer Overflow DoS

The vulnerability of the osdmapapplyincremental function in the net/ceph/osdmap.c module of the Linux kernel is related to an uncontrolled, exploitable condition. Exploiting this vulnerability could allow a remote attacker to compromise the integrity of protected information or cause service...

Linux kernel decode_pool() Heap Buffer Overflow DoS

The vulnerability of the decodepool function in the net/ceph/osdmap.c module, which implements kernel networking functions in the Linux operating system, relates to reading beyond the buffer boundaries. Exploiting this vulnerability could allow a malicious actor to gain access to protected...

CVE-2025-68285

In the Linux kernel, the following vulnerability has been resolved: libceph: fix potential use-after-free in havemonandosdmap The wait loop in cephopensession can race with the client receiving a new monmap or osdmap shortly after the initial map is received. Both cephmonchandlemap and handleonem...