The vulnerability of the osdmap_decode() function in the net/ceph/osdmap.c module, which is part of the Linux kernel’s networking functions, allows a hacker to gain access to protected information or cause service interruptions.

The vulnerability of the osdmapdecode function in the net/ceph/osdmap.c module, which is part of the Linux kernel’s networking functions, is related to incorrect input of configuration data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain access to protected...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-100115)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100115 advisory. In the Linux kernel, the following vulnerability has been resolved: libceph: Fix potential out-of-bounds access in osdmapdecode When decoding osdstate and osdweight...

CVE-2026-52958 libceph: Fix potential out-of-bounds access in osdmap_decode()

In the Linux kernel, the following vulnerability has been resolved: libceph: Fix potential out-of-bounds access in osdmapdecode When decoding osdstate and osdweight from an incoming osdmap in osdmapdecode, both are decoded for each osd, i.e., map-maxosd times. The cephdecodeneed check only accoun...

CVE-2026-52958

CVE-2026-52958 affects the Linux kernel libceph subsystem. The vulnerability arises in osdmap_decode() when decoding osd_state and osd_weight for each osd; the ceph_decode_need() check did not account for map->max_osd*sizeof(*map->osd_weight), enabling a potential out-of-bounds memory acces...