Threats tagged 'ghsa-pfqf-x57j-qhgm'

CVE-2026-43406 is a critical vulnerability in the Linux kernel's libceph component where improper bounds checking in process_message_header() can lead to out-of-bounds reads. This occurs if a message frame is corrupted or crafted maliciously so that the control segment length is less than the message header size or a non-message frame is treated as a message frame. The flaw allows an attacker to cause out-of-bounds memory reads, potentially leading to system instability or information disclosure.