CVE-2026-43405

A flaw was found in the libceph component of the Linux kernel. This vulnerability occurs in the cephmonmapdecode function due to incorrect handling of non-negative values, where int variables are used instead of u32 for bloblen and nummon. An attacker could exploit this by sending a specially...

CVE-2026-43405 libceph: Use u32 for non-negative values in ceph_monmap_decode()

In the Linux kernel, the following vulnerability has been resolved: libceph: Use u32 for non-negative values in cephmonmapdecode This patch fixes unnecessary implicit conversions that change signedness of bloblen and nummon in cephmonmapdecode. Currently bloblen and nummon are signed int variable...