exploitDog

CVE-2026-22990

Опубликовано: 23 янв. 2026

Источник: nvd

CVSS3: 5.5

EPSS Низкий

Описание

In the Linux kernel, the following vulnerability has been resolved:

libceph: replace overzealous BUG_ON in osdmap_apply_incremental()

If the osdmap is (maliciously) corrupted such that the incremental osdmap epoch is different from what is expected, there is no need to BUG. Instead, just declare the incremental osdmap to be invalid.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 2.6.34.1 (включая) до 5.10.248 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 5.11 (включая) до 5.15.198 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 5.16 (включая) до 6.1.161 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 6.2 (включая) до 6.6.121 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 6.7 (включая) до 6.12.66 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 6.13 (включая) до 6.18.6 (исключая)

cpe:2.3:o:linux:linux_kernel:2.6.34:-:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:2.6.34:rc2:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:2.6.34:rc3:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:2.6.34:rc4:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:2.6.34:rc5:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:2.6.34:rc6:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:2.6.34:rc7:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*

EPSS

Процентиль: 0%

0.00007

Низкий

5.5 Medium

CVSS3

Дефекты

CWE-617

Связанные уязвимости

CVE-2026-22990

CVSS3: 5.5

ubuntu

2 месяца назад

In the Linux kernel, the following vulnerability has been resolved: libceph: replace overzealous BUG_ON in osdmap_apply_incremental() If the osdmap is (maliciously) corrupted such that the incremental osdmap epoch is different from what is expected, there is no need to BUG. Instead, just declare the incremental osdmap to be invalid.

CVE-2026-22990

CVSS3: 7.1

redhat

2 месяца назад

In the Linux kernel, the following vulnerability has been resolved: libceph: replace overzealous BUG_ON in osdmap_apply_incremental() If the osdmap is (maliciously) corrupted such that the incremental osdmap epoch is different from what is expected, there is no need to BUG. Instead, just declare the incremental osdmap to be invalid.

CVE-2026-22990

CVSS3: 5.5

msrc

24 дня назад

libceph: replace overzealous BUG_ON in osdmap_apply_incremental()

CVE-2026-22990

CVSS3: 5.5

debian

2 месяца назад

In the Linux kernel, the following vulnerability has been resolved: l ...

GHSA-ff5w-pjxm-v3rr

CVSS3: 5.5

github

2 месяца назад

In the Linux kernel, the following vulnerability has been resolved: libceph: replace overzealous BUG_ON in osdmap_apply_incremental() If the osdmap is (maliciously) corrupted such that the incremental osdmap epoch is different from what is expected, there is no need to BUG. Instead, just declare the incremental osdmap to be invalid.

EPSS

Процентиль: 0%

0.00007

Низкий

5.5 Medium

CVSS3

Дефекты

CWE-617