CVE-2026-80557 libceph: fix OOB read in decode_watchers() via missing bounds check

In the Linux kernel, the following vulnerability has been resolved: libceph: fix OOB read in decodewatchers via missing bounds check cephstartdecoding validates that structlen bytes remain in the buffer after the encoding header, but accepts structlen=0 as valid: cephdecodeneedp, end, 0, bad alwa...

CVE-2026-80558

This Linux kernel vulnerability affects the libceph subsystem. A corrupted osdmap received from a Ceph monitor or OSD may contain OSD indices in its primary_temp field that are greater than max_osd or smaller than CEPH_HOMELESS_OSD (-1). While most OSD indices in the osdmap are validated, the one...

CVE-2026-80558 libceph: Avoid using invalid osd indices from primary_temp

In the Linux kernel, the following vulnerability has been resolved: libceph: Avoid using invalid osd indices from primarytemp A corrupted osdmap received from a Ceph monitor or OSD may contain osd indices in its pgtemp, primarytemp, pgupmap, and pgupmapitems parts that don't exist, i.e., that are...

CVE-2026-80557

CVE-2026-80557 is a 4-byte out-of-bounds read in the Linux kernel's libceph client, specifically in decode_watchers(). The function calls ceph_decode_32(p) without a preceding bounds check; when a malicious or compromised OSD sends an obj_list_watch_response_t with struct_len=0, the pointer equal...

CVE-2026-80557 libceph: fix OOB read in decode_watchers() via missing bounds check

In the Linux kernel, the following vulnerability has been resolved: libceph: fix OOB read in decodewatchers via missing bounds check cephstartdecoding validates that structlen bytes remain in the buffer after the encoding header, but accepts structlen=0 as valid: cephdecodeneedp, end, 0, bad alwa...

Security update for the Linux Kernel (Live Patch 57 for SUSE Linux Enterprise 15 SP4)

This update for the SUSE Linux Enterprise Kernel 5.14.21-150400.24.228 fixes various security issues: The following security issues were fixed: CVE-2023-53995: net: ipv4: fix one memleak in inetdelifa bsc1269284. CVE-2025-40204,CVE-2026-53224,CVE-2026-53246: sctp: validate cached peer INIT chunk...

SUSE-SU-2026:3829-1 Security update for the Linux Kernel (Live Patch 57 for SUSE Linux Enterprise 15 SP4)

This update for the SUSE Linux Enterprise Kernel 5.14.21-150400.24.228 fixes various security issues: The following security issues were fixed: - CVE-2023-53995: net: ipv4: fix one memleak in inetdelifa bsc1269284. - CVE-2025-40204,CVE-2026-53224,CVE-2026-53246: sctp: validate cached peer INIT...

Security update for the Linux Kernel (Live Patch 85 for SUSE Linux Enterprise 12 SP5)

This update for the SUSE Linux Enterprise Kernel 4.12.14-122.320 fixes various security issues: The following security issues were fixed: CVE-2025-40204,CVE-2026-53224,CVE-2026-53246: sctp: validate cached peer INIT chunk length in COOKIEECHO processing bsc1253437 bsc1270023 bsc1270024...

SUSE-SU-2026:3820-1 Security update for the Linux Kernel (Live Patch 85 for SUSE Linux Enterprise 12 SP5)

This update for the SUSE Linux Enterprise Kernel 4.12.14-122.320 fixes various security issues: The following security issues were fixed: - CVE-2025-40204,CVE-2026-53224,CVE-2026-53246: sctp: validate cached peer INIT chunk length in COOKIEECHO processing bsc1253437 bsc1270023 bsc1270024. -...

Linux Distros Unpatched Vulnerability : CVE-2026-80558

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libceph: Avoid using invalid osd indices from primarytemp A corrupted osdmap received from a Ceph monitor or OSD may contain osd indices in its pgtemp,...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098758)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098758 advisory. In the Linux kernel, the following vulnerability has been resolved: libceph: replace BUGON with bounds check for map-maxosd OSD indexes come from untrusted network...

CVE-2026-80557: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: libceph: fix OOB read in decodewatchers via missing bounds check cephstartdecoding validates that structlen bytes remain in the buffer after the encoding header, but accepts structlen=0 as valid: cephdecodeneedp, end, 0, bad alwa...

CVE-2026-80557: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: libceph: fix OOB read in decodewatchers via missing bounds check cephstartdecoding validates that structlen bytes remain in the buffer after the encoding header, but accepts structlen=0 as valid: cephdecodeneedp, end, 0, bad alwa...

PT-2026-82173

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds read exists in the libceph component. The ceph start decoding function allows a struct len value of 0, which can lead to a situation where no bytes are guaranteed for...

SUSE SLES15 Security Update : kernel (Live Patch 42 for SUSE Linux Enterprise 15 SP5) (SUSE-SU-2026:3717-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3717-1 advisory. This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.172 fixes various security issues: The following security issues were fixed:...

Linux Distros Unpatched Vulnerability : CVE-2026-80557

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libceph: fix OOB read in decodewatchers via missing bounds check cephstartdecoding validates that structlen bytes remain in the buffer after the encoding header...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098986)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098986 advisory. In the Linux kernel, the following vulnerability has been resolved: libceph: make decodepool more resilient against corrupted osdmaps If the osdmap is maliciously...

Linux Distros Unpatched Vulnerability : CVE-2026-80561

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libceph: fix multiple unsafe decodes in decodelocker decodelocker in clslockclient.c contains three unsafe decode operations that allow a malicious or compromis...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098951)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098951 advisory. In the Linux kernel, the following vulnerability has been resolved: libceph: Prevent potential null-ptr-deref in cephhandleauthreply If a message of type...

CVE-2026-80561: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: libceph: fix multiple unsafe decodes in decodelocker decodelocker in clslockclient.c contains three unsafe decode operations that allow a malicious or compromised OSD to trigger slab-out-of-bounds reads: 1. cephdecodecopy at the...