CVE-2026-80558: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: libceph: Avoid using invalid osd indices from primarytemp A corrupted osdmap received from a Ceph monitor or OSD may contain osd indices in its pgtemp, primarytemp, pgupmap, and pgupmapitems parts that don't exist, i.e., that are...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098758)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098758 advisory. In the Linux kernel, the following vulnerability has been resolved: libceph: replace BUGON with bounds check for map-maxosd OSD indexes come from untrusted network...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098986)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098986 advisory. In the Linux kernel, the following vulnerability has been resolved: libceph: make decodepool more resilient against corrupted osdmaps If the osdmap is maliciously...

SUSE-SU-2026:3781-1 Security update for the Linux Kernel (Live Patch 18 for SUSE Linux Enterprise 15 SP7)

This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.66 fixes various security issues: The following security issues were fixed: - CVE-2025-40204,CVE-2026-53224,CVE-2026-53246: sctp: validate cached peer INIT chunk length in COOKIEECHO processing bsc1253437 bsc1270023 bsc1270024. -...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-102072)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-102072 advisory. In the Linux kernel, the following vulnerability has been resolved: libceph: replace BUGON with bounds check for map-maxosd OSD indexes come from untrusted network...

SUSE CVE-2026-68159

In the Linux kernel, the following vulnerability has been resolved: libceph: bound pgtemp,upmap,upmapitems length to CEPHPGMAXSIZE decodepgtemp decodes an user-controlled length but only rejects values large enough to overflow the allocation; it does not bound it to CEPHPGMAXSIZE. The helper back...

SUSE CVE-2026-68154

In the Linux kernel, the following vulnerability has been resolved: libceph: reject zero bucket types in crushdecode CRUSH bucket type 0 is reserved for devices. The mapper relies on that invariant and uses type 0 to identify leaf devices. If crushdecode accepts a bucket with type 0, a malformed...

SUSE CVE-2026-68155

In the Linux kernel, the following vulnerability has been resolved: libceph: Reject monmaps advertising zero monitors A message of type CEPHMSGMONMAP contains a monmap that is sent from a monitor to the client. This monmap contains information about the existing monitors in the cluster. Currently...

SUSE CVE-2026-68156

In the Linux kernel, the following vulnerability has been resolved: libceph: refresh auth-authorizerbuf,len after authorizer update cephxcreateauthorizer caches au-buf-vec.iovbase and au-buf-vec.iovlen in struct cephauthhandshake. These cached values are then used by the messenger connect code wh...

SUSE CVE-2026-68157

In the Linux kernel, the following vulnerability has been resolved: libceph: guard missing CRUSH type name lookup Localized read selection can walk a parent bucket whose name exists in the CRUSH map while its type has no matching entry in typenames. getimmediateparent then dereferences a NULL...

SUSE CVE-2026-68158

In the Linux kernel, the following vulnerability has been resolved: libceph: Fix multiplication overflow in decodenewupstateweight If a message of type CEPHMSGOSDMAP contains a maliciously corrupted osdmap, out-of-bounds memory accesses may occur in decodenewupstateweight. This happens because th...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-102117)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-102117 advisory. In the Linux kernel, the following vulnerability has been resolved: libceph: Prevent potential null-ptr-deref in cephhandleauthreply If a message of type...

SUSE CVE-2026-68153

In the Linux kernel, the following vulnerability has been resolved: libceph: remove debugfs files before client teardown cephdestroyclient tears down the monitor client before removing the per-client debugfs files. A concurrent read of the monmap debugfs file can enter monmapshow after cephmoncst...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100737)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100737 advisory. In the Linux kernel, the following vulnerability has been resolved: libceph: Fix potential out-of-bounds access in osdmapdecode When decoding osdstate and osdweight...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099971)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099971 advisory. In the Linux kernel, the following vulnerability has been resolved: libceph: Fix potential null-ptr-deref in decodechooseargs A message of type CEPHMSGOSDMAP contain...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099788)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099788 advisory. In the Linux kernel, the following vulnerability has been resolved: libceph: Fix potential out-of-bounds access in crushdecode A message of type CEPHMSGOSDMAP...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-100115)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100115 advisory. In the Linux kernel, the following vulnerability has been resolved: libceph: Fix potential out-of-bounds access in osdmapdecode When decoding osdstate and osdweight...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-100181)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100181 advisory. In the Linux kernel, the following vulnerability has been resolved: libceph: handle rbtree insertion error in decodechooseargs A message of type CEPHMSGOSDMAP contai...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100726)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100726 advisory. In the Linux kernel, the following vulnerability has been resolved: libceph: Fix potential out-of-bounds access in crushdecode A message of type CEPHMSGOSDMAP...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100715)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100715 advisory. In the Linux kernel, the following vulnerability has been resolved: libceph: Fix potential null-ptr-deref in decodechooseargs A message of type CEPHMSGOSDMAP contain...