libceph: fix invalid accesses to ceph_connection_v1_info

...

CVE-2025-39880

CVE-2025-39880 is a Linux kernel vulnerability affecting the libceph code path. Affected component: ceph_connection_v1_info access in the generic messenger code can read/write a union member (v1 vs v2) without validating which member is active. On 64-bit systems, con->v1.auth_retry can overlap...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from memory leaks and invalid accesses that could lead to memory corruption...