CVE-2026-22990

HIGH

Linux Kernel - Reachable Assertion in libceph osdmap_apply_incremental

Title source: llm
STIX 2.1

Description

In the Linux kernel, the following vulnerability has been resolved: libceph: replace overzealous BUG_ON in osdmap_apply_incremental() If the osdmap is (maliciously) corrupted such that the incremental osdmap epoch is different from what is expected, there is no need to BUG. Instead, just declare the incremental osdmap to be invalid.

References (7)

Core 7

Scores

CVSS v3 7.5
EPSS 0.0034
EPSS Percentile 26.7%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable yes
Technical Impact partial

Details

CWE
CWE-617
Status published
Products (25)
linux/Kernel 2.6.34 - 5.10.248linux
linux/Kernel 5.11.0 - 5.15.198linux
linux/Kernel 5.16.0 - 6.1.161linux
linux/Kernel 6.13.0 - 6.18.6linux
linux/Kernel 6.2.0 - 6.6.121linux
linux/Kernel 6.7.0 - 6.12.66linux
Linux/Linux < 2.6.34
Linux/Linux 2.6.34
Linux/Linux 5.10.248 - 5.10.*
Linux/Linux 5.15.198 - 5.15.*
... and 15 more
Published Jan 23, 2026
Tracked Since Feb 18, 2026