🔴 严重 | CVE-2026-52958 — In the Linux kernel, the following vulnerability has be
🔴 《严重安全漏洞：CVE-2026-52958》
CVSS 评分: 严重（9.1） CVE ID: CVE-2026-52958
漏洞描述
In the Linux kernel, the following vulnerability has been resolved:
libceph: Fix potential out-of-bounds access in osdmap_decode()
When decoding osd_state and osd_weight from an incoming osdmap in
osdmap_decode(), both are decoded for each osd, i.e., map->max_osd
times. The ceph_decode_need() check only accounts for
sizeof(*map->osd_weight) once. This can potentially result in an
out-of-bounds memory access if the incoming message is corrupted such
that the max_osd value exceeds the actual content of the osdmap message.
This patch fixes the issue by changing the corresponding part in the
ceph_decode_need() check to account for
map->max_osd*sizeof(*map->osd_weight).
| 字段 | 值 |
|---|---|
| CVE ID | CVE-2026-52958 |
| CVSS 评分 | 9.1 |
| 严重程度 | 严重 |
| 发布时间 | 2026-06-24 |
| 状态 | Received |
数据来源: NVD | 获取时间: 2026-06-28 18:14
💬 评论