CVE-2026-22990: libceph: replace overzealous BUG_ON in osdmap_apply_incremental()
In the Linux kernel, the following vulnerability has been resolved:
libceph: replace overzealous BUGON in osdmapapplyincremental()
If the osdmap is (maliciously) corrupted such that the incremental osdmap epoch is different from what is expected, there is no need to BUG. Instead, just declare the incremental osdmap to be invalid.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-22990?
CVE-2026-22990 has been categorized with a severity that indicates it can lead to denial of service if exploited.
How do I fix CVE-2026-22990?
To fix CVE-2026-22990, you should update the Linux kernel to the latest stable version that includes the patch.
What systems are affected by CVE-2026-22990?
CVE-2026-22990 affects systems running the Linux kernel that utilizes the libceph networking protocol.
Is CVE-2026-22990 exploitable by an attacker?
Yes, CVE-2026-22990 can be exploited by an attacker with the ability to manipulate the osdmap.
What are the potential impacts of CVE-2026-22990?
The potential impacts of CVE-2026-22990 include a denial of service condition that can disrupt normal operations.