libceph: replace BUG_ON with bounds check for map->max_osd
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Fix
- Fixed in 6.1.159, 6.6.119, 6.12.61, 6.17.11
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
- Exploitation: none
- Automatable: yes
- Technical impact: partial
Summary
In the Linux kernel, the following vulnerability has been resolved: libceph: replace BUG_ON with bounds check for map->max_osd OSD indexes come from untrusted network packets. Boundary checks are added to validate these against map->max_osd. [ idryomov: drop BUG_ON in ceph_get_primary_affinity(), minor cosmetic edits ]
Timeline
- CVE published
- CISA SSVC assessment
Exploitation: none · Automatable: yes · Technical impact: partial
- Record last updated
Affected versions
- Linux Linux
From f24e9980eb860d8600cbe5ef3d2fd9295320d229 · fixed in 57f5fbae9f1024aba17ff75e00433324115c548a; From f24e9980eb860d8600cbe5ef3d2fd9295320d229 · fixed in becc488a4d864db338ebd4e313aa3c77da24b604; From f24e9980eb860d8600cbe5ef3d2fd9295320d229 · fixed in e67e3be690f5f7e3b031cf29e8d91e6d02a8e30d; From f24e9980eb860d8600cbe5ef3d2fd9295320d229 · fixed in b4368b7f97014e1015445d61abd0b27c4c6e8424; From f24e9980eb860d8600cbe5ef3d2fd9295320d229 · fixed in ec3797f043756a94ea2d0f106022e14ac4946c02
- Linux Linux
2.6.34
- KernelLinux
From 2.6.34 · fixed in 6.1.159; From 6.2.0 · fixed in 6.6.119; From 6.7.0 · fixed in 6.12.61; From 6.13.0 · fixed in 6.17.11