exploitDog

CVE-2026-22990

Опубликовано: 23 янв. 2026

Источник: nvd

CVSS3: 7.5

CVSS3: 5.5

EPSS Низкий

Описание

In the Linux kernel, the following vulnerability has been resolved:

libceph: replace overzealous BUG_ON in osdmap_apply_incremental()

If the osdmap is (maliciously) corrupted such that the incremental osdmap epoch is different from what is expected, there is no need to BUG. Instead, just declare the incremental osdmap to be invalid.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 2.6.34.1 (включая) до 5.10.248 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 5.11 (включая) до 5.15.198 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 5.16 (включая) до 6.1.161 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 6.2 (включая) до 6.6.121 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 6.7 (включая) до 6.12.66 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 6.13 (включая) до 6.18.6 (исключая)

cpe:2.3:o:linux:linux_kernel:2.6.34:-:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:2.6.34:rc2:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:2.6.34:rc3:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:2.6.34:rc4:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:2.6.34:rc5:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:2.6.34:rc6:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:2.6.34:rc7:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*

EPSS

Процентиль: 27%

0.00341

Низкий

7.5 High

CVSS3

5.5 Medium

CVSS3

Дефекты

CWE-617

Связанные уязвимости

CVE-2026-22990

CVSS3: 7.5

ubuntu

6 месяцев назад

In the Linux kernel, the following vulnerability has been resolved: libceph: replace overzealous BUG_ON in osdmap_apply_incremental() If the osdmap is (maliciously) corrupted such that the incremental osdmap epoch is different from what is expected, there is no need to BUG. Instead, just declare the incremental osdmap to be invalid.

CVE-2026-22990

CVSS3: 7.1

redhat

6 месяцев назад

In the Linux kernel, the following vulnerability has been resolved: libceph: replace overzealous BUG_ON in osdmap_apply_incremental() If the osdmap is (maliciously) corrupted such that the incremental osdmap epoch is different from what is expected, there is no need to BUG. Instead, just declare the incremental osdmap to be invalid.

CVE-2026-22990

CVSS3: 5.5

msrc

5 месяцев назад

libceph: replace overzealous BUG_ON in osdmap_apply_incremental()

CVE-2026-22990

CVSS3: 7.5

debian

6 месяцев назад

In the Linux kernel, the following vulnerability has been resolved: l ...

GHSA-ff5w-pjxm-v3rr

CVSS3: 5.5

github

6 месяцев назад

In the Linux kernel, the following vulnerability has been resolved: libceph: replace overzealous BUG_ON in osdmap_apply_incremental() If the osdmap is (maliciously) corrupted such that the incremental osdmap epoch is different from what is expected, there is no need to BUG. Instead, just declare the incremental osdmap to be invalid.

EPSS

Процентиль: 27%

0.00341

Низкий

7.5 High

CVSS3

5.5 Medium

CVSS3

Дефекты

CWE-617