VULNERABILITY INTELLIGENCE

CVE-2026-22990

CVSS score7.5 HIGH
EPSS probability0.40%
CISA KEVNot currently listed
Published2026-01-23
Last modified2026-10-19
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Description

In the Linux kernel, the following vulnerability has been resolved: libceph: replace overzealous BUG_ON in osdmap_apply_incremental() If the osdmap is (maliciously) corrupted such that the incremental osdmap epoch is different from what is expected, there is no need to BUG. Instead, just declare the incremental osdmap to be invalid.

Weakness classification

  • nvd@nist.gov: CWE-617
  • 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-400

Primary references