PT-2026-4490 · Linux+4 · Linux Kernel+4

Published

2026-01-01

·

Updated

2026-06-16

·

CVE-2026-22990

CVSS v3.1

7.5

High

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description A flaw exists in the libceph component of the Linux kernel related to handling potentially corrupted osdmaps. Specifically, an overzealous check within the osdmap apply incremental() function could cause a system bug when encountering an osdmap with an unexpected incremental epoch. The issue is resolved by changing the behavior to invalidate the incremental osdmap instead of triggering a bug.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

Assertion Failure

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-617

Related Identifiers

ALSA-2026:19568
ALSA-2026:25120
ALSA-2026:25121
AZL-78467
BDU:2026-04908
CVE-2026-22990
ECHO-C0ED-95B4-F8E1
OESA-2026-1760
OPENSUSE-SU-2026:20287-1
RHSA-2026:19568
SUSE-SU-2026:0447-1
SUSE-SU-2026:0472-1
SUSE-SU-2026:0587-1
SUSE-SU-2026:1668-1
SUSE-SU-2026:20477-1
SUSE-SU-2026:20498-1
SUSE-SU-2026:20555-1
SUSE-SU-2026:20599-1
SUSE-SU-2026:20615-1
SUSE-SU-2026:20845-1
SUSE-SU-2026:20876-1
USN-8096-1
USN-8096-2
USN-8096-3
USN-8096-4
USN-8096-5
USN-8116-1
USN-8141-1
USN-8163-1
USN-8163-2
USN-8243-1
USN-8278-1
USN-8278-2
USN-8289-1
USN-8289-2
USN-8296-1
USN-8296-2
USN-8393-1
USN-8440-1

Affected Products

Linuxmint
Linux Kernel
Rocky Linux
Ubuntu
Libceph