01 Record

CVE-2026-52955

libceph: Fix potential out-of-bounds access in crush_decode()

CriticalPUBLISHEDCNA: Linux

CNA base score9.8 CVSS v3.xCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

View raw JSON

02 Description

libceph: Fix potential out-of-bounds access in crush_decode()

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 0.38% probability of exploitation activity in the next 30 days.
EPSS percentile: Ranks above 31.1% of scored records. A rank, not a probability.
NVD base score: 9.8 (CVSS v3.x), scored by the NVD independently of the CNA.
NVD CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NVD analysis status: Analyzed. NVD last modified this record on 2026-07-15.
Red Hat severity: Moderate. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2026-06-24 16:28Z2 MO AGO

Last updated

2026-08-05 12:32Z1 MO AGO

Reserved

2026-06-09

Assigning CNA

Linux

Record state

PUBLISHED

Severity

Critical (CVSS 9.8)

CNA CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-125Out-of-bounds ReadBase
CWE-131Incorrect Calculation of Buffer SizeBase

Data version

5.2

Document digest

d69278570a248af5bf7126e6e56423e9abe15906587efd01ca379d66a7e68cf8

05 Affected products

VendorProductVersionsPlatforms

LinuxLinuxf24e9980eb860d8600cbe5ef3d2fd9295320d229 to < 6e70ef53e818c53eab28d7b0026b7fd03dddaba5, f24e9980eb860d8600cbe5ef3d2fd9295320d229 to < ebe76d58a48a48031b98543d86c4cd30a825b622, f24e9980eb860d8600cbe5ef3d2fd9295320d229 to < 3f42508191e129ee6b5ea96578d5cab14f2a013a, f24e9980eb860d8600cbe5ef3d2fd9295320d229 to < ea0d42137f0c06da71e37ffc647aab4c5309599a, f24e9980eb860d8600cbe5ef3d2fd9295320d229 to < cceb10023e76bc89f3fe9238ebd0ccab0fc7c7c5, f24e9980eb860d8600cbe5ef3d2fd9295320d229 to < 0f3604cbe4df14c5e58288ac9f57511e726a222d, f24e9980eb860d8600cbe5ef3d2fd9295320d229 to < fb176a99e4c1a5a8448a83d83d3606203ba81faa, f24e9980eb860d8600cbe5ef3d2fd9295320d229 to < 4c79fc2d598694bda845b46229c9d48b65042970, 2.6.34—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/6e70ef53e818c53eab28d7b0026b7fd03dddaba5
git.kernel.orghttps://git.kernel.org/stable/c/ebe76d58a48a48031b98543d86c4cd30a825b622
git.kernel.orghttps://git.kernel.org/stable/c/3f42508191e129ee6b5ea96578d5cab14f2a013a
git.kernel.orghttps://git.kernel.org/stable/c/ea0d42137f0c06da71e37ffc647aab4c5309599a
git.kernel.orghttps://git.kernel.org/stable/c/cceb10023e76bc89f3fe9238ebd0ccab0fc7c7c5
git.kernel.orghttps://git.kernel.org/stable/c/0f3604cbe4df14c5e58288ac9f57511e726a222d
git.kernel.orghttps://git.kernel.org/stable/c/fb176a99e4c1a5a8448a83d83d3606203ba81faa
git.kernel.orghttps://git.kernel.org/stable/c/4c79fc2d598694bda845b46229c9d48b65042970
access.redhat.comhttps://access.redhat.com/security/cve/CVE-2026-52955vdb-entryx_refsource_REDHAT
bugzilla.redhat.comRHBZ#2492328https://bugzilla.redhat.com/show_bug.cgi?id=2492328issue-trackingx_refsource_REDHAT
security.access.redhat.comhttps://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-52955.jsonx_sadp-csaf-vex

01 Record index

CVE-2026-52955

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References

02 Records

CVE-2026-52955

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References