In the Linux kernel, the following vulnerability has been resolved:
libceph: replace BUG_ON with bounds check for map->max_osd
OSD indexes come from untrusted network packets. Boundary checks are added to validate these against map->max_osd.
[ idryomov: drop BUG_ON in ceph_get_primary_affinity(), minor cosmetic edits ]
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel-toolsUpgrade kernel-libbpf-debuginfoUpgrade perf6.12Upgrade kernel-libbpf-staticUpgrade kernel-headersUpgrade kernel6.12Upgrade python3-perf-debuginfoUpgrade kernel6.12-libbpf-debuginfoUpgrade kernel-livepatch-6.12.63-84.121Upgrade kernel-modules-extra-commonUpgrade kernel-debuginfo-common-x86_64Upgrade kernel6.12-libbpf-develUpgrade kernel-modules-extraUpgrade bpftool-debuginfoUpgrade kernel6.12-headersUpgrade kernel6.12-modules-extraUpgrade python3-perf6.12-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade bpftoolUpgrade kernel6.12-develUpgrade kernel-libbpf-develUpgrade kernel6.12-toolsUpgrade kernelUpgrade python3-perf6.12Upgrade kernel-debuginfoUpgrade kernel-develUpgrade kernel6.12-tools-develUpgrade bpftool6.12-debuginfoUpgrade perf6.12-debuginfoUpgrade kernel6.12-libbpfUpgrade kernel-tools-debuginfoUpgrade kernel-libbpfUpgrade kernel6.12-tools-debuginfoUpgrade bpftool6.12Upgrade kernel6.12-debuginfo-common-aarch64Upgrade python3-perfUpgrade kernel6.12-debuginfoUpgrade kernel6.12-modules-extra-commonUpgrade perf-debuginfoUpgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel-tools-develUpgrade perfUpgrade kernel6.12-libbpf-staticUpgrade kernel-livepatch-6.1.159-181.297 | Jan 12, 2026 | Dec 16, 2025 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Jan 12, 2026 | Jan 12, 2026 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernelUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade bpftool | Mar 17, 2026 | Mar 16, 2026 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernelUpgrade bpftool | Mar 10, 2026 | Mar 10, 2026 |
| Oracle_linux | — | Upgrade kernel-uek | Feb 24, 2026 | Dec 16, 2025 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Dec 16, 2025 |
| Ubuntu | — | Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-raspiUpgrade linux-image-ibm-classicUpgrade linux-image-raspi-6.8Upgrade linux-image-nvidia-64kUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-azure-lts-24.04Upgrade linux-image-oem-22.04dUpgrade linux-image-gcp-fipsUpgrade linux-image-6.17.0-1010-azureUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-generic-6.17Upgrade linux-image-6.8.0-106-lowlatencyUpgrade linux-image-6.8.0-1029-xilinxUpgrade linux-image-6.8.0-1052-gcp-64kUpgrade linux-image-aws-6.8Upgrade linux-image-virtual-6.17Upgrade linux-image-aws-64k-6.17Upgrade linux-image-6.8.0-106-lowlatency-64kUpgrade linux-image-6.8.1-1045-realtimeUpgrade linux-image-6.8.0-106-genericUpgrade linux-image-gke-64k-6.8Upgrade linux-image-generic-64k-6.8Upgrade linux-image-virtual-6.8Upgrade linux-image-oem-22.04Upgrade linux-image-6.8.0-1047-oracle-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-gkeopUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-oracle-64k-6.17Upgrade linux-image-6.8.0-1049-ibmUpgrade linux-image-ibmUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.8.0-1052-azure-fipsUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-azure-6.17Upgrade linux-image-nvidiaUpgrade linux-image-genericUpgrade linux-image-6.8.0-1048-gkeUpgrade linux-image-6.8.0-1050-aws-64kUpgrade linux-image-oem-22.04aUpgrade linux-image-nvidia-6.8Upgrade linux-image-generic-64k-6.17Upgrade linux-image-oem-22.04cUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-6.17.0-1008-realtimeUpgrade linux-image-6.17.0-19-generic-64kUpgrade linux-image-gcp-64kUpgrade linux-image-6.17.0-19-genericUpgrade linux-image-azure-fipsUpgrade linux-image-oem-24.04cUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-6.8.0-2040-raspi-realtimeUpgrade linux-image-generic-64kUpgrade linux-image-aws-lts-24.04Upgrade linux-image-oracle-6.8Upgrade linux-image-realtime-6.17Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.17.0-1009-awsUpgrade linux-image-gke-6.8Upgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-1035-gkeopUpgrade linux-image-aws-64k-6.8Upgrade linux-image-6.8.0-106-fipsUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-6.8.0-1048-gke-64kUpgrade linux-image-xilinx-6.8Upgrade linux-image-aws-fipsUpgrade linux-image-6.17.0-1009-oracleUpgrade linux-image-realtime-6.8.1Upgrade linux-image-lowlatency-6.8Upgrade linux-image-gke-64kUpgrade linux-image-azureUpgrade linux-image-6.8.0-1049-nvidia-lowlatency-64kUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-gcp-64k-6.17Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-oem-24.04Upgrade linux-image-fipsUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.8.0-1050-awsUpgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-1047-oracleUpgrade linux-image-6.17.0-1017-oemUpgrade linux-image-6.8.0-1049-nvidia-lowlatencyUpgrade linux-image-6.17.0-1010-raspiUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-oracle-64kUpgrade linux-image-xilinxUpgrade linux-image-6.17.0-1009-gcpUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-aws-64kUpgrade linux-image-6.8.0-106-generic-64kUpgrade linux-image-oem-22.04bUpgrade linux-image-gcp-6.8Upgrade linux-image-6.8.0-1052-gcp-fipsUpgrade linux-image-oracleUpgrade linux-image-kvmUpgrade linux-image-6.17.0-1009-gcp-64kUpgrade linux-image-oem-6.17Upgrade linux-image-6.8.0-1049-nvidia-64kUpgrade linux-image-generic-6.8Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-virtualUpgrade linux-image-realtimeUpgrade linux-image-awsUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-oem-24.04dUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-1050-aws-fipsUpgrade linux-image-6.8.0-1052-gcpUpgrade linux-image-oracle-6.17Upgrade linux-image-6.17.0-1009-oracle-64kUpgrade linux-image-intel-iotgUpgrade linux-image-gcpUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-aws-fips-6.8Upgrade linux-image-ibm-6.8Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-aws-6.17Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-6.8.0-1049-nvidiaUpgrade linux-image-raspi-realtimeUpgrade linux-image-oem-24.04bUpgrade linux-image-fips-6.8Upgrade linux-image-azure-fips-6.8Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oem-24.04aUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-gkeUpgrade linux-image-raspi-6.17Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-6.17.0-1009-aws-64kUpgrade linux-image-gcp-6.17Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-azure-6.8Upgrade linux-image-6.8.0-1050-raspi | Mar 17, 2026 | Dec 16, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Dec 16, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub