CVE-2026-22984 is a vulnerability in the Linux kernel's libceph library where a lack of explicit bounds checking on the payload_len parameter in the handle_auth_done() function could lead to out-of-bounds memory reads. This flaw was fixed by performing explicit bounds checks to prevent possible out-of-bounds access. The vulnerability is part of a broader set of Linux kernel security issues addressed in Ubuntu security notices USN-8096-1 and USN-8096-2. The updates cover multiple kernel subsystems and require system updates and reboots. The vulnerability has a CVSS 3.1 base score of 9.8, indicating critical impact on confidentiality, integrity, and availability without requiring privileges or user interaction.

The vulnerability allows an attacker to cause out-of-bounds reads in kernel memory, potentially leading to exposure of sensitive information, system compromise, or denial of service. The CVSS score of 9.8 reflects high impact on confidentiality, integrity, and availability. No known exploits in the wild have been reported. The vulnerability affects unprivileged local attackers and could be leveraged to escalate privileges or escape container environments as part of the broader kernel security issues fixed in the same update.

A patch is available and has been released by Ubuntu as part of their Linux kernel security updates (USN-8096-1 and USN-8096-2). Users should update their Linux kernel packages to the fixed versions listed in the Ubuntu advisories and reboot their systems to apply the changes. Due to ABI changes in the kernel updates, recompilation and reinstallation of any third-party kernel modules are required. Follow the vendor's update instructions carefully to ensure full remediation.