CVE-2026-22984

Source
https://cve.org/CVERecord?id=CVE-2026-22984
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-22984.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2026-22984
Downstream
Related
Published
2026-01-23T15:24:06.245Z
Modified
2026-06-18T03:56:08.193167150Z
Severity
  • 9.8 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
libceph: prevent potential out-of-bounds reads in handle_auth_done()
Details

In the Linux kernel, the following vulnerability has been resolved:

libceph: prevent potential out-of-bounds reads in handleauthdone()

Perform an explicit bounds check on payload_len to avoid a possible out-of-bounds access in the callout.

[ idryomov: changelog ]

Database specific
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/22xxx/CVE-2026-22984.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
cd1a677cad994021b19665ed476aea63f5d54f31
Fixed
194cfe2af4d2a1de599d39dad636b47c2f6c2c96
Fixed
79fe3511db416d2f2edcfd93569807cb02736e5e
Fixed
ef208ea331ef688729f64089b895ed1b49e842e3
Fixed
2802ef3380fa8c4a08cda51ec1f085b1a712e9e2
Fixed
2d653bb63d598ae4b096dd678744bdcc34ee89e8
Fixed
818156caffbf55cb4d368f9c3cac64e458fb49c9

Database specific

source
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-22984.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
5.11.0
Fixed
5.15.198
Type
ECOSYSTEM
Events
Introduced
5.16.0
Fixed
6.1.161
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.6.121
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.12.66
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.18.6

Database specific

source
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-22984.json"