CVE-2026-22990

Published: Jan 23, 2026Modified: Jun 17, 2026

5.5

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Exploitability: 1.8 / Impact: 3.6

Source: NVD

Description

In the Linux kernel, the following vulnerability has been resolved: libceph: replace overzealous BUG_ON in osdmap_apply_incremental() If the osdmap is (maliciously) corrupted such that the incremental osdmap epoch is different from what is expected, there is no need to BUG. Instead, just declare the incremental osdmap to be invalid.

Affected (17)

Products: Linux: Linux Kernel

Linux

1 product

Linux Kernel

Configuration A

17 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	From 2.6.34.1 to 5.10.248
Linux Linux Kernel	From 5.11 to 5.15.198
Linux Linux Kernel	From 5.16 to 6.1.161
Linux Linux Kernel	From 6.13 to 6.18.6
Linux Linux Kernel	From 6.2 to 6.6.121
Linux Linux Kernel	From 6.7 to 6.12.66
Linux Linux Kernel	Version 2.6.34
Linux Linux Kernel	Version 2.6.34 rc2
Linux Linux Kernel	Version 2.6.34 rc3
Linux Linux Kernel	Version 2.6.34 rc4
Linux Linux Kernel	Version 2.6.34 rc5
Linux Linux Kernel	Version 2.6.34 rc6
Linux Linux Kernel	Version 2.6.34 rc7
Linux Linux Kernel	Version 6.19 rc1
Linux Linux Kernel	Version 6.19 rc2
Linux Linux Kernel	Version 6.19 rc3
Linux Linux Kernel	Version 6.19 rc4