CVE-2026-22984

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The libceph component in the Linux kernel contains a flaw where an out-of-bounds read could occur in the handle auth done() function. This is due to a missing bounds check on the payload len variable, potentially leading to unauthorized access. The issue is addressed by implementing an explicit bounds check on payload len before the callout is made.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.