CVE-2025-71116

Katalog CVE

CVSS 7.1 · High EPSS 0,38%

Kerentanan Out-of-bounds Read pada linux kernel. Skor CVSS 3.1 7.1 (High) menurut NVD.

Deskripsi (NVD)

In the Linux kernel, the following vulnerability has been resolved: libceph: make decode_pool() more resilient against corrupted osdmaps If the osdmap is (maliciously) corrupted such that the encoded length of ceph_pg_pool envelope is less than what is expected for a particular encoding version, out-of-bounds reads may ensue because the only bounds check that is there is based on that length value. This patch adds explicit bounds checks for each field that is decoded or skipped.

Rincian

Terbit di NVD

14 Januari 2026

Terakhir diubah

30 Juli 2026

Status NVD

Modified

CVSS 3.1

7.1 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-125: Out-of-bounds Read

EPSS (30 hari)

0,38% peluang dieksploitasi; lebih tinggi dari 29,9% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://git.kernel.org/stable/c/145d140abda80e33331c5781d6603014fa75d258 patch
• https://git.kernel.org/stable/c/2acb8517429ab42146c6c0ac1daed1f03d2fd125 patch
• https://git.kernel.org/stable/c/5d0d8c292531fe356c4e94dcfdf7d7212aca9957 patch
• https://git.kernel.org/stable/c/8c738512714e8c0aa18f8a10c072d5b01c83db39 patch
• https://git.kernel.org/stable/c/c82e39ff67353a5a6cbc07b786b8690bd2c45aaa patch
• https://git.kernel.org/stable/c/d061be4c8040ffb1110d537654a038b8b6ad39d2 patch
• https://git.kernel.org/stable/c/e927ab132b87ba3f076705fc2684d94b24201ed1 patch