7.5

CVE-2026-68155

libceph: Reject monmaps advertising zero monitors

In the Linux kernel, the following vulnerability has been resolved:

libceph: Reject monmaps advertising zero monitors

A message of type CEPH_MSG_MON_MAP contains a monmap that is sent from a
monitor to the client. This monmap contains information about the
existing monitors in the cluster. Currently, a monmap indicating that
there are zero monitors in the cluster is treated as valid. However, it
is impossible to have zero monitors in the cluster and still receive a
valid monmap from a monitor. Therefore, such a monmap must be corrupted
and should be treated as invalid. Furthermore, a monmap with a monitor
count of zero can subsequently crash the client when attempting to open
a session with a monitor in __open_session(). This happens because the
"BUG_ON(monc->monmap->num_mon < 1)" assertion in pick_new_mon() is
triggered.

This patch extends a check in ceph_monmap_decode() to also reject
arriving mon_maps with num_mon == 0 rather than only with
num_mon > CEPH_MAX_MON.

[ idryomov: drop "log output for unusual values of num_mon" part ]
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version ba75bb98cfb93b62c54af25bf67ff90857264bbe
Version < ba5f0015bfd376d764163045a61c17be75f44dae
Status affected
Version ba75bb98cfb93b62c54af25bf67ff90857264bbe
Version < caf082ef8609a6ac26159ce115f55ab7d00231a3
Status affected
Version ba75bb98cfb93b62c54af25bf67ff90857264bbe
Version < e3ccd4ecab09b22f507f49cb7ed9990c7158ceab
Status affected
Version ba75bb98cfb93b62c54af25bf67ff90857264bbe
Version < 0591a15815b498be628a937146e44487d599ba33
Status affected
Version ba75bb98cfb93b62c54af25bf67ff90857264bbe
Version < cd0d41bc569632eaaeccde9d2a6bc919ec00c407
Status affected
Version ba75bb98cfb93b62c54af25bf67ff90857264bbe
Version < e67e8b694872c9bc66996040f9de9242f6236ed9
Status affected
Version ba75bb98cfb93b62c54af25bf67ff90857264bbe
Version < 3b249546f59c3d6d3592c10657f82bc3f1faa07c
Status affected
Version ba75bb98cfb93b62c54af25bf67ff90857264bbe
Version < 40480eee361ed9676b3f844d532ac28b47251634
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 2.6.34
Status affected
Version 0
Version < 2.6.34
Status unaffected
Version <= 5.10.*
Version 5.10.271
Status unaffected
Version <= 5.15.*
Version 5.15.216
Status unaffected
Version <= 6.1.*
Version 6.1.183
Status unaffected
Version <= 6.6.*
Version 6.6.148
Status unaffected
Version <= 6.12.*
Version 6.12.101
Status unaffected
Version <= 6.18.*
Version 6.18.42
Status unaffected
Version <= 7.1.*
Version 7.1.6
Status unaffected
Version <= *
Version 7.2
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.67% 0.493
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
416baaa9-dc9f-4396-8d5f-8c081fb06d67 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/0591a15815b498be628a937146e44487d599ba33
https://git.kernel.org/stable/c/cd0d41bc569632eaaeccde9d2a6bc919ec00c407
https://git.kernel.org/stable/c/e67e8b694872c9bc66996040f9de9242f6236ed9
https://git.kernel.org/stable/c/3b249546f59c3d6d3592c10657f82bc3f1faa07c
https://git.kernel.org/stable/c/40480eee361ed9676b3f844d532ac28b47251634
https://git.kernel.org/stable/c/caf082ef8609a6ac26159ce115f55ab7d00231a3
https://git.kernel.org/stable/c/e3ccd4ecab09b22f507f49cb7ed9990c7158ceab
https://git.kernel.org/stable/c/ba5f0015bfd376d764163045a61c17be75f44dae