CVE-2026-22990CWE-400CWE-617denial-of-service

CVE-2026-22990

High · published January 23, 2026

CVSS v3.1
7.5
EPSS
0%
Percentile
30.1
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

libceph: replace overzealous BUG_ON in osdmap_apply_incremental()

If the osdmap is (maliciously) corrupted such that the incremental

osdmap epoch is different from what is expected, there is no need to

BUG. Instead, just declare the incremental osdmap to be invalid.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00373 · 30.1th percentile
Weaknesses
CWE-400 · Uncontrolled Resource Consumption; CWE-617 · Reachable Assertion
Published
2026-01-23T21:15Z
Affected products (17)
ProductVersionsFixed in
linux/linux_kernel≥ 2.6.34.1, < 5.10.2485.10.248
linux/linux_kernel≥ 5.11, < 5.15.1985.15.198
linux/linux_kernel≥ 5.16, < 6.1.1616.1.161
linux/linux_kernel≥ 6.2, < 6.6.1216.6.121
linux/linux_kernel≥ 6.7, < 6.12.666.12.66
linux/linux_kernel≥ 6.13, < 6.18.66.18.6
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
References (7)
https://git.kernel.org/stable/c/4b106fbb1c7b841cd402abd83eb2447164c799ea · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/6348d70af847b79805374fe628d3809a63fd7df3 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/6afd2a4213524bc742b709599a3663aeaf77193c · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/6c6cec3db3b418c4fdf815731bc39e46dff75e1b · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/9aa0b0c14cefece078286d78b97d4c09685e372d · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/d3613770e2677683e65d062da5e31f48c409abe9 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/e00c3f71b5cf75681dbd74ee3f982a99cb690c2b · 416baaa9-dc9f-4396-8d5f-8c081fb06d67
EPSS history
Timeline
  • 23 JAN 15:24Z
    libceph: replace overzealous BUG_ON in osdmap_apply_incremental()
    cvelistv5