CVE-2026-80558

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the libceph module where a corrupted osdmap received from a Ceph monitor or OSD may contain invalid osd indices in its pg temp, primary temp, pg upmap, and pg upmap items sections. These indices may be greater than max osd or smaller than CEPH HOMELESS OSD (-1). While most indices are validated, the one from primary temp is not checked in the ceph pg to up acting osds() function, which is called by calc target(). This can result in calc target() returning an invalid index as the target osd for a request. Since the osd state, osd weight, and osd addr arrays only contain entries from 0 to max osd -1, this leads to out-of-bounds accesses when reading from these arrays.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.