AZL-78470
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-78470.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/AZL-78470
- Upstream
- Published
- 2026-01-23T16:15:55Z
- Modified
- 2026-04-01T05:23:15.294476Z
- Summary
- CVE-2026-22991 affecting package kernel for versions less than 5.15.200.1-1
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
libceph: make freechoosearg_map() resilient to partial allocation
freechoosearg_map() may dereference a NULL pointer if its caller fails after a partial allocation.
For example, in decodechooseargs(), if allocation of argmap->args fails, execution jumps to the fail label and freechooseargmap() is called. Since argmap->size is updated to a non-zero value before memory allocation, freechooseargmap() will iterate over arg_map->args and dereference a NULL pointer.
To prevent this potential NULL pointer dereference and make freechoosearg_map() more resilient, add checks for pointers before iterating.
- References