Description
In the Linux kernel, the following vulnerability has been resolved: libceph: prevent potential out-of-bounds reads in handle_auth_done() Perform an explicit bounds check on payload_len to avoid a possible out-of-bounds access in the callout. [ idryomov: changelog ]
References (6)
Core 6
Core References
Scores
CVSS v3
9.8
EPSS
0.0002
EPSS Percentile
4.9%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Details
CWE
CWE-125
Status
published
Products (21)
linux/Kernel
5.11.0 - 5.15.198linux
linux/Kernel
5.16.0 - 6.1.161linux
linux/Kernel
6.13.0 - 6.18.6linux
linux/Kernel
6.2.0 - 6.6.121linux
linux/Kernel
6.7.0 - 6.12.66linux
Linux/Linux
< 5.11
Linux/Linux
5.11
Linux/Linux
5.15.198 - 5.15.*
Linux/Linux
6.1.161 - 6.1.*
Linux/Linux
6.12.66 - 6.12.*
... and 11 more
Published
Jan 23, 2026
Tracked Since
Feb 18, 2026