PT-2026-82144

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Ceph component where the handle reply function stores a ceph mds request pointer in the current-journal info variable while populating the inode and dentry cache...

Linux Distros Unpatched Vulnerability : CVE-2026-80528

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ceph: avoid fs reclaim while using current-journalinfo handlereply stores a cephmdsrequest pointer in current-journalinfo while filling the inode and dentry cac...

Linux Distros Unpatched Vulnerability : CVE-2026-80561

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libceph: fix multiple unsafe decodes in decodelocker decodelocker in clslockclient.c contains three unsafe decode operations that allow a malicious or compromis...

CVE-2026-80528: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ceph: avoid fs reclaim while using current-journalinfo handlereply stores a cephmdsrequest pointer in current-journalinfo while filling the inode and dentry cache from an MDS reply. An allocation in this section can enter direct...

The vulnerability of the `ceph_get_snapdir()` function in the `fs/ceph/inode.c` module of the distributed file system support module for Linux kernels allows a attacker to cause a service failure.

The vulnerability of the cephgetsnapdir function in the fs/ceph/inode.c module of the distributed file system support module for Linux operating systems is related to incomplete cleanup of temporary or auxiliary resources. Exploiting this vulnerability can allow an attacker to cause service...

The vulnerability of the ceph_handle_authreply() function in the net/ceph/auth.c module of the Linux operating system allows a hacker to gain access to protected information or cause a service failure.

The vulnerability of the cephhandleauthreply function in the net/ceph/auth.c module of the Linux kernel is related to operations that go beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to gain access to protected information or cause service...

The vulnerability of the ceph kernel component in the Linux operating system, which allows a hacker to trigger a service failure

The vulnerability of the ceph kernel component in the Linux operating system is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

[SECURITY] Fedora 44 Update: ceph-20.2.4-1.fc44

Ceph is a massively scalable, open-source, distributed storage system that ru ns on commodity hardware and delivers object, block and file system storage...

[SECURITY] Fedora 43 Update: ceph-19.2.6-1.fc43

Ceph is a massively scalable, open-source, distributed storage system that ru ns on commodity hardware and delivers object, block and file system storage...

Fedora 44 : ceph (2026-7de7d03796)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-7de7d03796 advisory. Ceph 20.2.4 GA CVE-2025-30156 is an authentication bypass in CephX caused by misuse of AES-CBC...

Fedora 43 : ceph (2026-ebffec502b)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-ebffec502b advisory. Ceph 19.2.6 GA CVE-2025-30156 is an authentication bypass in CephX caused by misuse of AES-CBC...

PT-2026-82771

Name of the Vulnerable Software and Affected Versions Ceph versions prior to 20.2.4 Ceph versions prior to 19.2.6 Description The Ceph Object Gateway RGW SigV4 handler fails to reject requests containing x-amz- headers that are not included in the signed header set. While AWS S3 requires all x-am...

PT-2026-82767

Name of the Vulnerable Software and Affected Versions Ceph versions prior to 20.2.4 Ceph versions prior to 19.2.6 Description The Monitor subscription handler fails to properly authorize access to the configuration-key store. A CephX user with mon allow r capabilities can read the entire store by...

PT-2026-82765

Name of the Vulnerable Software and Affected Versions Ceph versions prior to 20.2.4 Ceph versions prior to 19.2.6 Description The RADOS Gateway RGW uses an AES-128-CBC handler to protect STS session tokens that lacks message authentication. This allows an attacker with a valid STS token to perfor...

CVE-2025-30156

A flaw was found in the CephX authentication protocol used by Ceph, a distributed storage system. CephX uses AES-128-CBC encryption with a hardcoded initialization vector and no message authentication HMAC, making it vulnerable to the same class of unauthenticated-encryption attacks that...

Linux Distros Unpatched Vulnerability : CVE-2026-50152

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Ceph is an open-source distributed storage platform providing object, block, and file storage. In versions prior to 20.2.4 and 19.2.6, the Monitor subscription...

The vulnerability of the process_v2_sparse_read() function in the net/ceph/messenger_v2.c kernel module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the processv2sparseread function in the net/ceph/messengerv2.c kernel module of the Linux operating system is related to the use of an uninitialized resource. Exploiting this vulnerability could allow a attacker to cause a service failure...

Linux Distros Unpatched Vulnerability : CVE-2026-39944

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Ceph is an open-source distributed storage platform providing object, block, and file storage. In versions prior to 20.2.4 and 19.2.6, the RADOS Gateway RGW...

Linux Distros Unpatched Vulnerability : CVE-2026-54330

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Ceph is an open-source distributed storage platform providing object, block, and file storage. In versions prior to 20.2.4 and 19.2.6, the Ceph Object Gateway R...

Linux Distros Unpatched Vulnerability : CVE-2025-30156

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Ceph is an open-source distributed storage platform providing object, block, and file storage. In versions prior to 20.2.4 and 19.2.6, the CephX authentication...