In the Linux kernel, the following vulnerability has been resolved:
libceph: fix invalid accesses to ceph_connection_v1_info
There is a place where generic code in messenger.c is reading and another place where it is writing to con->v1 union member without checking that the union member is active (i.e. msgr1 is in use).
On 64-bit systems, con->v1.auth_retry overlaps with con->v2.out_iter, so such a read is almost guaranteed to return a bogus value instead of 0 when msgr2 is in use. This ends up being fairly benign because the side effect is just the invalidation of the authorizer and successive fetching of new tickets.
con->v1.connect_seq overlaps with con->v2.conn_bufs and the fact that it's being written to can cause more serious consequences, but luckily it's not something that happens often.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade python-perfUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-headersUpgrade kernel-livepatch-5.15.194-135.217Upgrade python-perf-debuginfoUpgrade kernel-tools-develUpgrade kernel-toolsUpgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade perf-debuginfoUpgrade bpftool | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade kernel6.12-libbpfUpgrade kernel6.12-tools-debuginfoUpgrade kernel-livepatch-6.1.155-176.282Upgrade kernelUpgrade kernel-libbpf-develUpgrade kernel6.12-headersUpgrade kernel-libbpf-staticUpgrade python3-perf-debuginfoUpgrade python3-perf6.12-debuginfoUpgrade perf6.12Upgrade kernel-modules-extra-commonUpgrade kernel-debuginfoUpgrade bpftoolUpgrade python3-perfUpgrade kernel6.12-debuginfoUpgrade kernel6.12-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel6.12-tools-develUpgrade python3-perf6.12Upgrade kernel6.12-libbpf-staticUpgrade kernel6.12-debuginfo-common-aarch64Upgrade bpftool6.12Upgrade perfUpgrade kernel-develUpgrade kernel6.12-modules-extra-commonUpgrade perf6.12-debuginfoUpgrade kernel6.12-libbpf-debuginfoUpgrade perf-debuginfoUpgrade kernel6.12-modules-extraUpgrade kernel6.12-libbpf-develUpgrade kernel6.12-develUpgrade kernel-toolsUpgrade kernel-libbpf-debuginfoUpgrade kernel-headersUpgrade kernel6.12Upgrade bpftool6.12-debuginfoUpgrade kernel-libbpfUpgrade bpftool-debuginfoUpgrade kernel-livepatch-6.12.48-67.114Upgrade kernel-tools-develUpgrade kernel-modules-extraUpgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-aarch64 | Oct 16, 2025 | Sep 23, 2025 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Sep 25, 2025 | Sep 25, 2025 |
| Oracle_linux | — | Upgrade kernel-uek | Nov 11, 2025 | Sep 23, 2025 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Sep 23, 2025 |
| Ubuntu | — | Upgrade linux-image-5.15.0-1096-gkeUpgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-5.15.0-1099-realtimeUpgrade linux-image-azure-lts-24.04Upgrade linux-image-5.15.0-1109-azure-fipsUpgrade linux-image-6.8.0-106-fipsUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.8.0-1048-gkeUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-6.8.0-1047-oracleUpgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-5.15.0-1110-azureUpgrade linux-image-azure-fips-6.8Upgrade linux-image-gcpUpgrade linux-image-aws-fips-6.8Upgrade linux-image-5.15.0-1092-kvmUpgrade linux-image-5.15.0-170-fipsUpgrade linux-image-6.8.0-1048-gke-64kUpgrade linux-image-6.8.0-1050-awsUpgrade linux-image-6.8.0-1052-gcp-64kUpgrade linux-image-oracle-64kUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-oem-22.04aUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-5.15.0-1100-gcpUpgrade linux-image-6.8.0-106-generic-64kUpgrade linux-image-gcp-6.8Upgrade linux-image-intel-iotgUpgrade linux-image-6.8.0-1052-azure-fipsUpgrade linux-image-oem-20.04dUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-6.8.0-1049-ibmUpgrade linux-image-5.15.0-1095-intel-iotgUpgrade linux-image-intelUpgrade linux-image-fips-6.8Upgrade linux-image-kvmUpgrade linux-image-oem-20.04cUpgrade linux-image-6.8.1-1045-realtimeUpgrade linux-image-ibm-classicUpgrade linux-image-5.15.0-170-genericUpgrade linux-image-aws-lts-22.04Upgrade linux-image-oem-22.04cUpgrade linux-image-5.15.0-1052-nvidia-tegra-rtUpgrade linux-image-gke-6.8Upgrade linux-image-5.15.0-1083-gkeopUpgrade linux-image-generic-64kUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.15.0-1100-aws-fipsUpgrade linux-image-fips-5.15Upgrade linux-image-gke-5.15Upgrade linux-image-gkeopUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-5.15.0-1064-xilinx-zynqmpUpgrade linux-image-gkeUpgrade linux-image-6.8.0-1050-aws-fipsUpgrade linux-image-raspi-realtimeUpgrade linux-image-aws-64kUpgrade linux-image-ibmUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-5.15.0-1100-awsUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-oem-20.04Upgrade linux-image-6.8.0-1047-oracle-64kUpgrade linux-image-aws-64k-6.8Upgrade linux-image-5.15.0-1109-azureUpgrade linux-image-aws-lts-24.04Upgrade linux-image-nvidia-5.15Upgrade linux-image-nvidia-tegraUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-azure-fipsUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-azure-6.8Upgrade linux-image-lowlatencyUpgrade linux-image-aws-5.15Upgrade linux-image-5.15.0-170-generic-lpaeUpgrade linux-image-6.8.0-1049-nvidia-lowlatencyUpgrade linux-image-5.15.0-1100-aws-64kUpgrade linux-image-generic-6.8Upgrade linux-image-kvm-5.15Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-virtualUpgrade linux-image-generic-64k-6.8Upgrade linux-image-5.15.0-1094-ibmUpgrade linux-image-oem-22.04bUpgrade linux-image-xilinxUpgrade linux-image-5.15.0-1097-raspiUpgrade linux-image-realtime-5.15Upgrade linux-image-oracleUpgrade linux-image-ibm-6.8Upgrade linux-image-nvidia-64kUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-5.15.0-170-generic-64kUpgrade linux-image-lowlatency-5.15Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-generic-lpae-5.15Upgrade linux-image-gcp-fips-5.15Upgrade linux-image-5.15.0-170-lowlatency-64kUpgrade linux-image-azureUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-generic-5.15Upgrade linux-image-aws-fips-5.15Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-1050-raspiUpgrade linux-image-6.8.0-2040-raspi-realtimeUpgrade linux-image-azure-lts-22.04Upgrade linux-image-intel-iotg-5.15Upgrade linux-image-generic-64k-5.15Upgrade linux-image-5.15.0-1041-nvidia-tegra-igxUpgrade linux-image-aws-fipsUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-5.15.0-1052-nvidia-tegraUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.8.0-1049-nvidia-lowlatency-64kUpgrade linux-image-azure-5.15Upgrade linux-image-raspiUpgrade linux-image-gcp-64kUpgrade linux-image-5.15.0-1097-oracleUpgrade linux-image-oracle-5.15Upgrade linux-image-xilinx-6.8Upgrade linux-image-6.8.0-1052-gcpUpgrade linux-image-5.15.0-1095-nvidia-lowlatencyUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-generic-lpaeUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-oem-22.04dUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-virtual-5.15Upgrade linux-image-raspi-nolpaeUpgrade linux-image-oem-20.04bUpgrade linux-image-raspi-6.8Upgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-virtual-6.8Upgrade linux-image-ibm-5.15Upgrade linux-image-raspi-5.15Upgrade linux-image-gcp-5.15Upgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-nvidiaUpgrade linux-image-gke-64kUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-aws-6.8Upgrade linux-image-6.8.0-1035-gkeopUpgrade linux-image-6.8.0-1029-xilinxUpgrade linux-image-5.15.0-1092-intel-iot-realtimeUpgrade linux-image-5.15.0-1041-nvidia-tegra-igx-rtUpgrade linux-image-azure-fips-5.15Upgrade linux-image-lowlatency-6.8Upgrade linux-image-gke-64k-6.8Upgrade linux-image-realtime-6.8.1Upgrade linux-image-azure-cvmUpgrade linux-image-6.8.0-106-genericUpgrade linux-image-6.8.0-1052-gcp-fipsUpgrade linux-image-6.8.0-1049-nvidiaUpgrade linux-image-5.15.0-170-lowlatencyUpgrade linux-image-5.15.0-1100-gcp-fipsUpgrade linux-image-5.15.0-1095-nvidiaUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-gcp-fipsUpgrade linux-image-6.8.0-106-lowlatencyUpgrade linux-image-realtimeUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-genericUpgrade linux-image-aws-64k-5.15Upgrade linux-image-6.8.0-106-lowlatency-64kUpgrade linux-image-fipsUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-oracle-6.8Upgrade linux-image-oem-22.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-awsUpgrade linux-image-6.8.0-1050-aws-64kUpgrade linux-image-6.8.0-1049-nvidia-64k | Feb 13, 2026 | Feb 12, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 7, 2025 | Sep 23, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub