CVE-2026-22990

In the Linux kernel, the following vulnerability has been resolved: libceph: replace overzealous BUG_ON in osdmap_apply_incremental() If the osdmap is (maliciously) corrupted such that the incremental osdmap epoch is different from what is expected, there is no need to BUG. Instead, just declare the incremental osdmap to be invalid.

CVSS 3.1

5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS

0.4% chance of exploitation in the next 30 days; higher than 34% of CVEs (scores of 2026-10-25)

CWEs

CWE-617, CWE-400

Published

2026-01-23

Modified

2026-10-19

Record from

the NVD, synced 2026-10-21

Affected

• linux:linux_kernel

References

• https://git.kernel.org/stable/c/4b106fbb1c7b841cd402abd83eb2447164c799ea
• https://git.kernel.org/stable/c/6348d70af847b79805374fe628d3809a63fd7df3
• https://git.kernel.org/stable/c/6afd2a4213524bc742b709599a3663aeaf77193c
• https://git.kernel.org/stable/c/6c6cec3db3b418c4fdf815731bc39e46dff75e1b
• https://git.kernel.org/stable/c/9aa0b0c14cefece078286d78b97d4c09685e372d

Check your stackJSON