Description
In the Linux kernel, the following vulnerability has been resolved: libceph: replace overzealous BUG_ON in osdmap_apply_incremental() If the osdmap is (maliciously) corrupted such that the incremental osdmap epoch is different from what is expected, there is no need to BUG. Instead, just declare the incremental osdmap to be invalid.
References (7)
Scores
CVSS v3
7.5
EPSS
0.0002
EPSS Percentile
3.8%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Details
CWE
CWE-617
Status
published
Products (25)
linux/Kernel
2.6.34 - 5.10.248linux
linux/Kernel
5.11.0 - 5.15.198linux
linux/Kernel
5.16.0 - 6.1.161linux
linux/Kernel
6.13.0 - 6.18.6linux
linux/Kernel
6.2.0 - 6.6.121linux
linux/Kernel
6.7.0 - 6.12.66linux
Linux/Linux
< 2.6.34
Linux/Linux
2.6.34
Linux/Linux
5.10.248 - 5.10.*
Linux/Linux
5.15.198 - 5.15.*
... and 15 more
Published
Jan 23, 2026
Tracked Since
Feb 18, 2026