The vulnerability of the process_auth_done() function in the net/ceph/messenger_v2.c module, which is part of the Linux kernel’s networking functions, allows a malicious actor to gain access to protected information or cause service failures remotely.

The vulnerability of the processauthdone function in the net/ceph/messengerv2.c module, which is part of the Linux kernel’s networking functions, relates to reading beyond the buffer boundaries. Exploiting this vulnerability could allow a malicious actor to gain access to protected information or...

CVE-2026-43304

A flaw was found in the libceph component of the Linux kernel. This vulnerability occurs when the kernel processes authentication keys, specifically in the processauthdone function, where it fails to properly enforce a maximum length for key material. An attacker could exploit this by providing a...