CVE-2025-39880

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains an issue within the libceph component related to invalid accesses to ceph connection v1 info. Specifically, generic code in messenger.c reads and writes to the con->v1 union member without verifying its active status. On 64-bit systems, con->v1.auth retry overlaps with con->v2.out iter, potentially leading to incorrect values. Additionally, con->v1.connect seq overlaps with con->v2.conn bufs, and writing to this location could have more severe consequences. The issue arises from improper handling of the con->v1 and con->v2 structures within the Ceph connection object.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.