CVE-2026-52958: libceph: Fix potential out-of-bounds access in osdmap_decode()
In the Linux kernel, the following vulnerability has been resolved:
libceph: Fix potential out-of-bounds access in osdmapdecode()
When decoding osdstate and osdweight from an incoming osdmap in osdmapdecode(), both are decoded for each osd, i.e., map->maxosd times. The cephdecodeneed() check only accounts for sizeof(map->osdweight) once. This can potentially result in an out-of-bounds memory access if the incoming message is corrupted such that the maxosd value exceeds the actual content of the osdmap message.
This patch fixes the issue by changing the corresponding part in the cephdecodeneed() check to account for map->maxosdsizeof(map->osdweight).
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.6.143.1-1 - Upgrade
Upgrade
Linux kernelto a version that resolves this vulnerability.Patch libceph: Fix potential out-of-bounds access in osdmap_decode()
Event History
Frequently Asked Questions
What is the severity of CVE-2026-52958?
CVE-2026-52958 has a risk rating of 37.
How do I fix CVE-2026-52958?
To fix CVE-2026-52958, ensure that your system is updated with the latest patches provided for the Linux kernel.
What software is affected by CVE-2026-52958?
CVE-2026-52958 affects the Linux libceph component of the Linux kernel.
What type of vulnerability is CVE-2026-52958?
CVE-2026-52958 is a vulnerability related to potential out-of-bounds access in the osdmap_decode() function.
When was CVE-2026-52958 published?
CVE-2026-52958 was published on June 24, 2026.