CVE-2025-71116: libceph: make decode_pool() more resilient against corrupted osdmaps
In the Linux kernel, the following vulnerability has been resolved:
libceph: make decodepool() more resilient against corrupted osdmaps
If the osdmap is (maliciously) corrupted such that the encoded length of cephpgpool envelope is less than what is expected for a particular encoding version, out-of-bounds reads may ensue because the only bounds check that is there is based on that length value.
This patch adds explicit bounds checks for each field that is decoded or skipped.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-71116?
CVE-2025-71116 has been classified with a high severity due to its potential to exploit corrupted osdmaps leading to system vulnerabilities.
How do I fix CVE-2025-71116?
To fix CVE-2025-71116, ensure your Linux Kernel is updated to the latest stable version where the vulnerability has been patched.
What software is affected by CVE-2025-71116?
CVE-2025-71116 affects the Linux Kernel, specifically its libceph component responsible for handling Ceph object storage.
What can happen if CVE-2025-71116 is exploited?
Exploitation of CVE-2025-71116 could lead to data corruption and denial of service due to the manipulation of encoded lengths in osdmaps.
Is CVE-2025-71116 related to potential data breaches?
Yes, CVE-2025-71116 poses a risk for data breaches as it involves the resilience of data structures in a distributed storage system.