In the Linux kernel, the following vulnerability has been resolved:
libceph: make decode_pool() more resilient against corrupted osdmaps
If the osdmap is (maliciously) corrupted such that the encoded length of ceph_pg_pool envelope is less than what is expected for a particular encoding version, out-of-bounds reads may ensue because the only bounds check that is there is based on that length value.
This patch adds explicit bounds checks for each field that is decoded or skipped.
CVSS Details
- CVSS 3.1 Base Score: 9.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-cross-headersUpgrade kernel-rt-debug-modules-extraUpgrade kernel-modulesUpgrade kernel-64k-modules-coreUpgrade kernel-64k-develUpgrade kernel-rt-64k-debug-modules-extraUpgrade kernel-develUpgrade kernel-docUpgrade kernelUpgrade kernel-rt-debug-coreUpgrade kernel-debugUpgrade kernel-rt-64k-develUpgrade kernel-rt-debugUpgrade kernel-debug-develUpgrade kernel-rt-debug-develUpgrade kernel-tools-libsUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-coreUpgrade kernel-64k-debug-modulesUpgrade kernel-modules-extraUpgrade bpftoolUpgrade perfUpgrade python3-perfUpgrade kernel-rt-64k-debug-modules-coreUpgrade kernel-rt-64k-coreUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-develUpgrade kernel-debug-uki-virtUpgrade kernel-64k-debug-coreUpgrade kernel-zfcpdump-develUpgrade kernel-rt-coreUpgrade kernel-64k-debug-modules-coreUpgrade kernel-64k-debug-develUpgrade kernel-debug-coreUpgrade kernel-64k-modules-extraUpgrade rtlaUpgrade kernel-rt-debug-modulesUpgrade libperfUpgrade kernel-rt-64k-debug-develUpgrade rvUpgrade kernel-abi-stablelistsUpgrade kernel-devel-matchedUpgrade kernel-rt-64k-debug-modulesUpgrade kernel-rt-modulesUpgrade kernel-headersUpgrade kernel-uki-virtUpgrade kernel-debug-modules-extraUpgrade kernel-64k-coreUpgrade kernel-64k-debugUpgrade kernel-rt-64k-debugUpgrade kernel-rt-64k-modules-coreUpgrade kernel-rt-64kUpgrade kernel-rt-64k-debug-coreUpgrade kernel-64k-debug-modules-extraUpgrade kernel-rt-debug-modules-coreUpgrade kernel-toolsUpgrade kernel-debug-modules-coreUpgrade kernel-debug-modulesUpgrade kernel-rt-64k-modulesUpgrade kernel-debug-devel-matchedUpgrade kernel-tools-libs-develUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-64k-devel-matchedUpgrade kernel-zfcpdump-coreUpgrade kernel-64k-modulesUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-rt-64k-modules-extraUpgrade kernel-rtUpgrade kernel-rt-modules-extraUpgrade kernel-uki-virt-addonsUpgrade kernel-64kUpgrade kernel-modules-coreUpgrade kernel-zfcpdump-modulesUpgrade kernel-zfcpdumpUpgrade kernel-rt-modules-core | May 28, 2026 | May 28, 2026 |
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-5.10.248-247.988Upgrade bpftool-debuginfoUpgrade kernel-headersUpgrade python-perf-debuginfoUpgrade kernelUpgrade bpftoolUpgrade python-perfUpgrade kernel-tools-debuginfoUpgrade perfUpgrade kernel-livepatch-5.15.201-140.219Upgrade kernel-debuginfoUpgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64Upgrade perf-debuginfoUpgrade kernel-tools-develUpgrade kernel-devel | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade bpftool-debuginfoUpgrade python3-perf6.12Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-debuginfoUpgrade perf6.12Upgrade kernel-livepatch-6.12.64-87.122Upgrade bpftool6.12-debuginfoUpgrade kernel6.12-tools-develUpgrade kernel6.12-modules-extra-commonUpgrade kernel6.12-libbpf-debuginfoUpgrade kernel-headersUpgrade kernel-libbpfUpgrade kernel-debuginfoUpgrade kernel6.12Upgrade kernel6.12-modules-extraUpgrade kernel-modules-extraUpgrade kernel-libbpf-debuginfoUpgrade kernel6.12-headersUpgrade perf-debuginfoUpgrade kernel6.12-develUpgrade kernel-develUpgrade perfUpgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel6.12-debuginfo-common-aarch64Upgrade bpftool6.12Upgrade bpftoolUpgrade kernel-debuginfo-common-x86_64Upgrade kernel6.12-tools-debuginfoUpgrade kernel-libbpf-develUpgrade kernel6.12-libbpfUpgrade kernel6.12-libbpf-develUpgrade kernel-tools-develUpgrade python3-perfUpgrade perf6.12-debuginfoUpgrade kernel6.12-debuginfoUpgrade kernel-toolsUpgrade kernel-modules-extra-commonUpgrade kernel6.12-libbpf-staticUpgrade kernel6.12-toolsUpgrade kernel-libbpf-staticUpgrade kernelUpgrade python3-perf6.12-debuginfoUpgrade kernel-livepatch-6.1.161-183.298Upgrade python3-perf-debuginfo | Feb 20, 2026 | Jan 14, 2026 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Feb 11, 2026 | Feb 11, 2026 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Feb 24, 2026 | Jan 14, 2026 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | May 24, 2026 | Jan 14, 2026 |
| Rocky_linux | — | Upgrade kernel-develUpgrade kernel-rt-debuginfoUpgrade kernel-debug-modules-coreUpgrade kernel-debug-debuginfoUpgrade perfUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debug-coreUpgrade kernel-coreUpgrade kernel-rt-coreUpgrade kernel-rt-debug-modules-coreUpgrade kernel-zfcpdump-modules-extraUpgrade bpftoolUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-debug-debuginfoUpgrade kernel-debug-coreUpgrade kernel-debug-uki-virtUpgrade kernel-rt-kvmUpgrade kernel-tools-debuginfoUpgrade kernel-debugUpgrade kernel-debuginfoUpgrade kernel-rt-debugUpgrade kernel-zfcpdumpUpgrade kernel-modules-extraUpgrade kernel-rtUpgrade kernel-tools-libsUpgrade rvUpgrade kernel-rt-develUpgrade python3-perfUpgrade kernel-rt-debug-modulesUpgrade kernel-toolsUpgrade python3-perf-debuginfoUpgrade kernel-rt-modulesUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-uki-virt-addonsUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-modules-coreUpgrade kernel-rt-debug-develUpgrade kernel-rt-debug-kvmUpgrade libperfUpgrade kernel-debug-modulesUpgrade rtlaUpgrade kernel-zfcpdump-develUpgrade kernelUpgrade kernel-devel-matchedUpgrade kernel-uki-virtUpgrade kernel-modules-coreUpgrade kernel-modulesUpgrade kernel-debug-modules-extraUpgrade kernel-debug-develUpgrade kernel-zfcpdump-modulesUpgrade libperf-debuginfoUpgrade kernel-tools-libs-develUpgrade kernel-debuginfo-common-s390xUpgrade perf-debuginfoUpgrade kernel-rt-debug-modules-extraUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-debug-devel-matched | Jun 1, 2026 | May 31, 2026 |
| Ubuntu | — | Upgrade linux-image-oem-24.04Upgrade linux-image-oracle-64kUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-nvidia-tegra-igxUpgrade linux-image-oem-22.04bUpgrade linux-image-xilinxUpgrade linux-image-5.15.0-1044-nvidia-tegra-igx-rtUpgrade linux-image-5.15.0-1055-nvidia-tegraUpgrade linux-image-6.8.0-1051-nvidia-64kUpgrade linux-image-6.17.0-1012-awsUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-gkeUpgrade linux-image-6.8.0-110-genericUpgrade linux-image-ibmUpgrade linux-image-oracleUpgrade linux-image-gkeop-6.8Upgrade linux-image-5.15.0-173-generic-lpaeUpgrade linux-image-aws-6.17Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-6.8.0-1054-gcp-64kUpgrade linux-image-aws-64k-5.15Upgrade linux-image-lowlatencyUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-5.15.0-1109-azureUpgrade linux-image-6.17.0-1010-realtimeUpgrade linux-image-aws-64k-6.8Upgrade linux-image-fips-5.15Upgrade linux-image-gcp-6.17Upgrade linux-image-generic-6.8Upgrade linux-image-5.15.0-1098-nvidiaUpgrade linux-image-5.15.0-1103-aws-fipsUpgrade linux-image-6.8.0-1050-gkeUpgrade linux-image-6.8.0-1059-azureUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-azure-6.8Upgrade linux-image-azure-fips-6.8Upgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-6.8.0-1022-nvidia-tegra-rtUpgrade linux-image-aws-lts-22.04Upgrade linux-image-6.8.0-1022-nvidia-tegraUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-1100-oracleUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-oem-20.04dUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-azure-cvmUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-oem-6.17Upgrade linux-image-oem-24.04dUpgrade linux-image-nvidia-tegra-6.8Upgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-ibm-classicUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-6.17.0-1012-gcp-64kUpgrade linux-image-oem-22.04aUpgrade linux-image-virtualUpgrade linux-image-awsUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.15.0-1097-ibmUpgrade linux-image-6.17.0-1011-oracleUpgrade linux-image-5.15.0-1098-nvidia-lowlatencyUpgrade linux-image-intel-iotgUpgrade linux-image-lowlatency-64kUpgrade linux-image-5.15.0-1098-intel-iotgUpgrade linux-image-5.15.0-173-genericUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-gke-5.15Upgrade linux-image-6.8.0-1054-azure-fipsUpgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-5.15.0-1109-azure-fipsUpgrade linux-image-6.17.0-1011-oracle-64kUpgrade linux-image-nvidia-tegra-rt-6.8Upgrade linux-image-6.8.0-1052-aws-fipsUpgrade linux-image-6.17.0-1020-oemUpgrade linux-image-raspi-6.17Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-raspi-realtimeUpgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-5.15.0-1102-realtimeUpgrade linux-image-fipsUpgrade linux-image-fips-6.8Upgrade linux-image-aws-64kUpgrade linux-image-oem-24.04aUpgrade linux-image-oem-22.04Upgrade linux-image-intel-iotg-5.15Upgrade linux-image-oem-20.04Upgrade linux-image-aws-5.15Upgrade linux-image-gcp-6.8Upgrade linux-image-gcpUpgrade linux-image-gcp-5.15Upgrade linux-image-ibm-6.8Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.8.0-110-lowlatency-64kUpgrade linux-image-azure-lts-24.04Upgrade linux-image-generic-6.17Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-realtimeUpgrade linux-image-5.15.0-1095-kvmUpgrade linux-image-oracle-6.17Upgrade linux-image-6.8.0-1049-oracle-64kUpgrade linux-image-6.8.0-1051-nvidiaUpgrade linux-image-6.8.0-110-fipsUpgrade linux-image-6.8.0-1054-gcp-fipsUpgrade linux-image-5.15.0-1097-raspiUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-generic-lpaeUpgrade linux-image-generic-lpae-5.15Upgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-oem-24.04bUpgrade linux-image-5.15.0-1103-gcp-fipsUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.15.0-1086-gkeopUpgrade linux-image-6.17.0-22-genericUpgrade linux-image-6.8.0-110-lowlatencyUpgrade linux-image-realtime-5.15Upgrade linux-image-raspi-6.8Upgrade linux-image-oem-22.04dUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-lowlatency-5.15Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-kvm-5.15Upgrade linux-image-generic-64k-6.8Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-azure-fipsUpgrade linux-image-azure-6.17Upgrade linux-image-6.8.0-1054-gcpUpgrade linux-image-6.8.0-1051-ibmUpgrade linux-image-6.8.0-1037-gkeopUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-gcp-fips-5.15Upgrade linux-image-oem-20.04cUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-gke-64kUpgrade linux-image-5.15.0-173-fipsUpgrade linux-image-6.17.0-1014-raspiUpgrade linux-image-generic-5.15Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.8.0-1052-raspiUpgrade linux-image-6.8.0-1029-xilinxUpgrade linux-image-5.15.0-1044-nvidia-tegra-igxUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-nvidia-5.15Upgrade linux-image-5.15.0-1067-xilinx-zynqmpUpgrade linux-image-generic-64k-6.17Upgrade linux-image-generic-64k-5.15Upgrade linux-image-6.8.0-1049-oracleUpgrade linux-image-azureUpgrade linux-image-aws-fipsUpgrade linux-image-aws-64k-6.17Upgrade linux-image-6.17.0-1013-azureUpgrade linux-image-6.17.0-1012-gcpUpgrade linux-image-6.17.0-1012-aws-64kUpgrade linux-image-realtime-6.8.1Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-110-generic-64kUpgrade linux-image-6.8.1-1047-realtimeUpgrade linux-image-5.15.0-1103-aws-64kUpgrade linux-image-5.15.0-1099-gkeUpgrade linux-image-ibm-5.15Upgrade linux-image-gke-64k-6.8Upgrade linux-image-oem-20.04bUpgrade linux-image-5.15.0-1103-awsUpgrade linux-image-gke-6.8Upgrade linux-image-6.8.0-1051-nvidia-lowlatencyUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-aws-6.8Upgrade linux-image-6.8.0-1052-aws-64kUpgrade linux-image-gcp-64kUpgrade linux-image-azure-fips-5.15Upgrade linux-image-6.8.0-1050-gke-64kUpgrade linux-image-5.15.0-173-lowlatencyUpgrade linux-image-virtual-5.15Upgrade linux-image-realtime-6.17Upgrade linux-image-raspi-5.15Upgrade linux-image-nvidia-tegraUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-nvidiaUpgrade linux-image-lowlatency-6.8Upgrade linux-image-azure-lts-22.04Upgrade linux-image-virtual-6.8Upgrade linux-image-oracle-64k-6.17Upgrade linux-image-5.15.0-1103-gcpUpgrade linux-image-generic-64kUpgrade linux-image-genericUpgrade linux-image-raspiUpgrade linux-image-oracle-6.8Upgrade linux-image-kvmUpgrade linux-image-gkeopUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-6.8.0-1052-awsUpgrade linux-image-6.17.0-22-generic-64kUpgrade linux-image-5.15.0-1055-nvidia-tegra-rtUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.8.0-1054-azureUpgrade linux-image-xilinx-6.8Upgrade linux-image-5.15.0-173-lowlatency-64kUpgrade linux-image-5.15.0-1110-azureUpgrade linux-image-oracle-5.15Upgrade linux-image-oem-24.04cUpgrade linux-image-5.15.0-1094-intel-iot-realtimeUpgrade linux-image-gkeop-5.15Upgrade linux-image-intelUpgrade linux-image-oem-22.04cUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-gcp-fipsUpgrade linux-image-gcp-64k-6.17Upgrade linux-image-azure-5.15Upgrade linux-image-6.8.0-2042-raspi-realtimeUpgrade linux-image-5.15.0-173-generic-64kUpgrade linux-image-virtual-6.17Upgrade linux-image-6.8.0-1051-nvidia-lowlatency-64kUpgrade linux-image-aws-lts-24.04Upgrade linux-image-aws-fips-6.8Upgrade linux-image-aws-fips-5.15 | Mar 17, 2026 | Jan 14, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Jan 14, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub