Loading vulnerability…
Linux kernel libceph OSD map reachable assertion denial of service
CVE-2026-22990 is a reachable assertion vulnerability in the Linux kernel's libceph component. The osdmap_apply_incremental() function invokes BUG_ON when an incremental Ceph OSD map has an epoch different from the expected value. A maliciously corrupted map can therefore trigger a kernel BUG rather than being safely rejected, causing denial of service. The fix replaces the assertion with error handling that declares the incremental OSD map invalid.
What it means and what to do now: patch path, interim mitigations, and the assume-compromise checklist.
What an attacker gets, and what they’ve been doing with it.
Processing a malformed incremental OSD map can trigger a kernel BUG and potentially a kernel panic, disrupting the affected client and services dependent on it. The established security impact is loss of availability; confidentiality loss, integrity compromise, and code execution are not established.
If you can’t patch tonight, do this now.
No vulnerability-specific workaround is established. Until patched, restrict Ceph network access to trusted hosts and segments and prevent untrusted OSD map inputs from reaching affected kernel clients. These exposure-reduction measures do not replace the kernel fix.
Patch, then assume compromise.
Install a vendor-supported kernel update containing the osdmap_apply_incremental() fix and reboot into the updated kernel. Fixed releases include Debian trixie 6.12.69-1, Debian bookworm 6.1.162-1, RHEL 8.10 4.18.0-553.132.1.el8_10, RHEL 9.6 5.14.0-570.120.1.el9_6, and RHEL 10.0 EUS 6.12.0-55.95.1.el10_0. Use the applicable distribution and support-stream advisory rather than comparing version numbers across kernel branches.
No public exploits tracked yet. Mallory keeps watching.
Products and vendors Mallory has correlated with this vulnerability. Open in Mallory to drill down to specific CPE configurations and version ranges.
25 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.