Threats tagged 'ghsa-vccx-ghmw-f5j8'

A critical vulnerability in the Linux kernel's libceph component was resolved to prevent potential out-of-bounds writes in the function handle_auth_session_key(). The issue arose because the 'len' field used in processing originated from untrusted network packets without proper boundary checks. This flaw could lead to memory corruption during decryption of connection secrets or processing of service tickets. The vulnerability has been addressed by adding boundary checks to prevent such out-of-bounds writes.