Search: CVE-2026-22984

CVE-2026-22984 is a critical vulnerability in the Linux kernel's libceph component that could allow out-of-bounds reads in the handle_auth_done() function. The issue arises from missing bounds checks on the payload length, which has been fixed by adding explicit validation. This vulnerability has a high CVSS score of 9.8, indicating severe impact on confidentiality, integrity, and availability. The flaw affects Linux kernel version 5.11 and has been addressed in multiple subsequent commits.