CVE-2026-52958

Last refreshed2026-10-17

Status: UPDATED | Advisory ID: CVE-2026-52958

Key Details

CVE	CVE-2026-52958
CVSS Score / Version	9.1 (Critical) / CVSS v3.1
Updated	2026-10-16
CVSS Vector	`CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H`
CVSS Prose	attack vector is network; attack complexity is low; privileges required is none; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is none; availability impact is high.
Affected products	Linux Kernel
Classified as	CWE-125 (Out-of-bounds Read)

Vendor	Product	Affected Versions	Patch Status
Linux	Linux Kernel

Vendor

Product

Affected Versions

Patch Status

Linux

Linux Kernel

Subsystems	OT Supporting Infrastructure
Sectors	All Sectors

In the Linux kernel, the following vulnerability has been resolved:

libceph: Fix potential out-of-bounds access in osdmap_decode()

When decoding osd_state and osd_weight from an incoming osdmap in

osdmap_decode(), both are decoded for each osd, i.e., map->max_osd

times. The ceph_decode_need() check only accounts for

sizeof(*map->osd_weight) once. This can potentially result in an

out-of-bounds memory access if the incoming message is corrupted such

that the max_osd value exceeds the actual content of the osdmap message.

This patch fixes the issue by changing the corresponding part in the

ceph_decode_need() check to account for

map->max_osd*sizeof(*map->osd_weight). (NVD)

Monitor Linux's web page for any future patch releases.

Source	Reference
NVD	https://nvd.nist.gov/vuln/detail/CVE-2026-52958
CVE	https://www.cve.org/CVERecord?id=CVE-2026-52958

Source

Reference

NVD

CVE