Vulnerability · Published Jan 23, 2026 · Assigned by Linux

CVE-2026-22990libceph: replace overzealous BUG_ON in osdmap_apply_incremental()

High 7.5

In plain English

A high-severity uncontrolled resource consumption in Linux from Linux. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 35% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)7.5High
Exploit odds (30 days)0.4%top 65.3% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

In the Linux kernel, the following vulnerability has been resolved: libceph: replace overzealous BUG_ON in osdmap_apply_incremental() If the osdmap is (maliciously) corrupted such that the incremental osdmap epoch is different from what is expected, there is no need to BUG. Instead, just declare the incremental osdmap to be invalid.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
AlmaLinux:8bpftool4.18.0-553.132.1.el8_10ALSA-2026:25121
AlmaLinux:10kernel6.12.0-211.60.1.el10_2ALSA-2026:71602
AlmaLinux:8kernel4.18.0-553.132.1.el8_10ALSA-2026:25121
AlmaLinux:9kernel5.14.0-687.10.1.el9_8ALSA-2026:19568
AlmaLinux:10kernel-64k6.12.0-211.60.1.el10_2ALSA-2026:71602
AlmaLinux:9kernel-64k5.14.0-687.10.1.el9_8ALSA-2026:19568
AlmaLinux:10kernel-64k-core6.12.0-211.60.1.el10_2ALSA-2026:71602
AlmaLinux:9kernel-64k-core5.14.0-687.10.1.el9_8ALSA-2026:19568
AlmaLinux:10kernel-64k-debug6.12.0-211.60.1.el10_2ALSA-2026:71602
AlmaLinux:9kernel-64k-debug5.14.0-687.10.1.el9_8ALSA-2026:19568
AlmaLinux:10kernel-64k-debug-core6.12.0-211.60.1.el10_2ALSA-2026:71602
AlmaLinux:9kernel-64k-debug-core5.14.0-687.10.1.el9_8ALSA-2026:19568
AlmaLinux:10kernel-64k-debug-devel6.12.0-211.60.1.el10_2ALSA-2026:71602
AlmaLinux:9kernel-64k-debug-devel5.14.0-687.10.1.el9_8ALSA-2026:19568
AlmaLinux:10kernel-64k-debug-devel-matched6.12.0-211.60.1.el10_2ALSA-2026:71602
AlmaLinux:9kernel-64k-debug-devel-matched5.14.0-687.10.1.el9_8ALSA-2026:19568
AlmaLinux:10kernel-64k-debug-modules6.12.0-211.60.1.el10_2ALSA-2026:71602
AlmaLinux:9kernel-64k-debug-modules5.14.0-687.10.1.el9_8ALSA-2026:19568
AlmaLinux:10kernel-64k-debug-modules-core6.12.0-211.60.1.el10_2ALSA-2026:71602
AlmaLinux:9kernel-64k-debug-modules-core5.14.0-687.10.1.el9_8ALSA-2026:19568
AlmaLinux:10kernel-64k-debug-modules-extra6.12.0-211.60.1.el10_2ALSA-2026:71602
AlmaLinux:9kernel-64k-debug-modules-extra5.14.0-687.10.1.el9_8ALSA-2026:19568
AlmaLinux:10kernel-64k-devel6.12.0-211.60.1.el10_2ALSA-2026:71602
AlmaLinux:9kernel-64k-devel5.14.0-687.10.1.el9_8ALSA-2026:19568
AlmaLinux:10kernel-64k-devel-matched6.12.0-211.60.1.el10_2ALSA-2026:71602
AlmaLinux:9kernel-64k-devel-matched5.14.0-687.10.1.el9_8ALSA-2026:19568
AlmaLinux:10kernel-64k-modules6.12.0-211.60.1.el10_2ALSA-2026:71602
AlmaLinux:9kernel-64k-modules5.14.0-687.10.1.el9_8ALSA-2026:19568
AlmaLinux:10kernel-64k-modules-core6.12.0-211.60.1.el10_2ALSA-2026:71602
AlmaLinux:9kernel-64k-modules-core5.14.0-687.10.1.el9_8ALSA-2026:19568
AlmaLinux:10kernel-64k-modules-extra6.12.0-211.60.1.el10_2ALSA-2026:71602
AlmaLinux:9kernel-64k-modules-extra5.14.0-687.10.1.el9_8ALSA-2026:19568
AlmaLinux:10kernel-abi-stablelists6.12.0-211.60.1.el10_2ALSA-2026:71602
AlmaLinux:8kernel-abi-stablelists4.18.0-553.132.1.el8_10ALSA-2026:25121
AlmaLinux:9kernel-abi-stablelists5.14.0-687.10.1.el9_8ALSA-2026:19568
AlmaLinux:10kernel-core6.12.0-211.60.1.el10_2ALSA-2026:71602
AlmaLinux:8kernel-core4.18.0-553.132.1.el8_10ALSA-2026:25121
AlmaLinux:9kernel-core5.14.0-687.10.1.el9_8ALSA-2026:19568
AlmaLinux:10kernel-cross-headers6.12.0-211.60.1.el10_2ALSA-2026:71602
AlmaLinux:8kernel-cross-headers4.18.0-553.132.1.el8_10ALSA-2026:25121
AlmaLinux:9kernel-cross-headers5.14.0-687.10.1.el9_8ALSA-2026:19568
AlmaLinux:10kernel-debug6.12.0-211.60.1.el10_2ALSA-2026:71602
AlmaLinux:8kernel-debug4.18.0-553.132.1.el8_10ALSA-2026:25121
AlmaLinux:9kernel-debug5.14.0-687.10.1.el9_8ALSA-2026:19568
AlmaLinux:10kernel-debug-core6.12.0-211.60.1.el10_2ALSA-2026:71602
AlmaLinux:8kernel-debug-core4.18.0-553.132.1.el8_10ALSA-2026:25121
AlmaLinux:9kernel-debug-core5.14.0-687.10.1.el9_8ALSA-2026:19568
AlmaLinux:10kernel-debug-devel6.12.0-211.60.1.el10_2ALSA-2026:71602
AlmaLinux:8kernel-debug-devel4.18.0-553.132.1.el8_10ALSA-2026:25121
AlmaLinux:9kernel-debug-devel5.14.0-687.10.1.el9_8ALSA-2026:19568
AlmaLinux:10kernel-debug-devel-matched6.12.0-211.60.1.el10_2ALSA-2026:71602
AlmaLinux:9kernel-debug-devel-matched5.14.0-687.10.1.el9_8ALSA-2026:19568
AlmaLinux:10kernel-debug-modules6.12.0-211.60.1.el10_2ALSA-2026:71602
AlmaLinux:8kernel-debug-modules4.18.0-553.132.1.el8_10ALSA-2026:25121
AlmaLinux:9kernel-debug-modules5.14.0-687.10.1.el9_8ALSA-2026:19568
AlmaLinux:10kernel-debug-modules-core6.12.0-211.60.1.el10_2ALSA-2026:71602
AlmaLinux:9kernel-debug-modules-core5.14.0-687.10.1.el9_8ALSA-2026:19568
AlmaLinux:10kernel-debug-modules-extra6.12.0-211.60.1.el10_2ALSA-2026:71602
AlmaLinux:8kernel-debug-modules-extra4.18.0-553.132.1.el8_10ALSA-2026:25121
AlmaLinux:9kernel-debug-modules-extra5.14.0-687.10.1.el9_8ALSA-2026:19568
AlmaLinux:10kernel-debug-uki-virt6.12.0-211.60.1.el10_2ALSA-2026:71602
AlmaLinux:9kernel-debug-uki-virt5.14.0-687.10.1.el9_8ALSA-2026:19568
AlmaLinux:10kernel-devel6.12.0-211.60.1.el10_2ALSA-2026:71602
AlmaLinux:8kernel-devel4.18.0-553.132.1.el8_10ALSA-2026:25121
AlmaLinux:9kernel-devel5.14.0-687.10.1.el9_8ALSA-2026:19568
AlmaLinux:10kernel-devel-matched6.12.0-211.60.1.el10_2ALSA-2026:71602
AlmaLinux:9kernel-devel-matched5.14.0-687.10.1.el9_8ALSA-2026:19568
AlmaLinux:10kernel-doc6.12.0-211.60.1.el10_2ALSA-2026:71602
AlmaLinux:8kernel-doc4.18.0-553.132.1.el8_10ALSA-2026:25121
AlmaLinux:9kernel-doc5.14.0-687.10.1.el9_8ALSA-2026:19568
AlmaLinux:10kernel-headers6.12.0-211.60.1.el10_2ALSA-2026:71602
AlmaLinux:8kernel-headers4.18.0-553.132.1.el8_10ALSA-2026:25121
AlmaLinux:9kernel-headers5.14.0-687.10.1.el9_8ALSA-2026:19568
AlmaLinux:10kernel-modules6.12.0-211.60.1.el10_2ALSA-2026:71602
AlmaLinux:8kernel-modules4.18.0-553.132.1.el8_10ALSA-2026:25121
AlmaLinux:9kernel-modules5.14.0-687.10.1.el9_8ALSA-2026:19568
AlmaLinux:10kernel-modules-core6.12.0-211.60.1.el10_2ALSA-2026:71602
AlmaLinux:9kernel-modules-core5.14.0-687.10.1.el9_8ALSA-2026:19568
AlmaLinux:10kernel-modules-extra6.12.0-211.60.1.el10_2ALSA-2026:71602
AlmaLinux:8kernel-modules-extra4.18.0-553.132.1.el8_10ALSA-2026:25121
AlmaLinux:9kernel-modules-extra5.14.0-687.10.1.el9_8ALSA-2026:19568
AlmaLinux:10kernel-modules-extra-matched6.12.0-211.60.1.el10_2ALSA-2026:71602
AlmaLinux:10kernel-rt6.12.0-211.60.1.el10_2ALSA-2026:71602
AlmaLinux:8kernel-rt4.18.0-553.132.1.rt7.473.el8_10ALSA-2026:25120
AlmaLinux:9kernel-rt5.14.0-687.10.1.el9_8ALSA-2026:19568
AlmaLinux:10kernel-rt-64k6.12.0-211.60.1.el10_2ALSA-2026:71602
AlmaLinux:9kernel-rt-64k5.14.0-687.10.1.el9_8ALSA-2026:19568
AlmaLinux:10kernel-rt-64k-core6.12.0-211.60.1.el10_2ALSA-2026:71602
AlmaLinux:9kernel-rt-64k-core5.14.0-687.10.1.el9_8ALSA-2026:19568
AlmaLinux:10kernel-rt-64k-debug6.12.0-211.60.1.el10_2ALSA-2026:71602
AlmaLinux:9kernel-rt-64k-debug5.14.0-687.10.1.el9_8ALSA-2026:19568
AlmaLinux:10kernel-rt-64k-debug-core6.12.0-211.60.1.el10_2ALSA-2026:71602
AlmaLinux:9kernel-rt-64k-debug-core5.14.0-687.10.1.el9_8ALSA-2026:19568
AlmaLinux:10kernel-rt-64k-debug-devel6.12.0-211.60.1.el10_2ALSA-2026:71602
AlmaLinux:9kernel-rt-64k-debug-devel5.14.0-687.10.1.el9_8ALSA-2026:19568
AlmaLinux:10kernel-rt-64k-debug-modules6.12.0-211.60.1.el10_2ALSA-2026:71602
AlmaLinux:9kernel-rt-64k-debug-modules5.14.0-687.10.1.el9_8ALSA-2026:19568
AlmaLinux:10kernel-rt-64k-debug-modules-core6.12.0-211.60.1.el10_2ALSA-2026:71602
AlmaLinux:9kernel-rt-64k-debug-modules-core5.14.0-687.10.1.el9_8ALSA-2026:19568
AlmaLinux:10kernel-rt-64k-debug-modules-extra6.12.0-211.60.1.el10_2ALSA-2026:71602
AlmaLinux:9kernel-rt-64k-debug-modules-extra5.14.0-687.10.1.el9_8ALSA-2026:19568
AlmaLinux:10kernel-rt-64k-devel6.12.0-211.60.1.el10_2ALSA-2026:71602
AlmaLinux:9kernel-rt-64k-devel5.14.0-687.10.1.el9_8ALSA-2026:19568
AlmaLinux:10kernel-rt-64k-modules6.12.0-211.60.1.el10_2ALSA-2026:71602
AlmaLinux:9kernel-rt-64k-modules5.14.0-687.10.1.el9_8ALSA-2026:19568
AlmaLinux:10kernel-rt-64k-modules-core6.12.0-211.60.1.el10_2ALSA-2026:71602
AlmaLinux:9kernel-rt-64k-modules-core5.14.0-687.10.1.el9_8ALSA-2026:19568
AlmaLinux:10kernel-rt-64k-modules-extra6.12.0-211.60.1.el10_2ALSA-2026:71602
AlmaLinux:9kernel-rt-64k-modules-extra5.14.0-687.10.1.el9_8ALSA-2026:19568
AlmaLinux:10kernel-rt-core6.12.0-211.60.1.el10_2ALSA-2026:71602
AlmaLinux:8kernel-rt-core4.18.0-553.132.1.rt7.473.el8_10ALSA-2026:25120
AlmaLinux:9kernel-rt-core5.14.0-687.10.1.el9_8ALSA-2026:19568
AlmaLinux:10kernel-rt-debug6.12.0-211.60.1.el10_2ALSA-2026:71602
AlmaLinux:8kernel-rt-debug4.18.0-553.132.1.rt7.473.el8_10ALSA-2026:25120
AlmaLinux:9kernel-rt-debug5.14.0-687.10.1.el9_8ALSA-2026:19568
AlmaLinux:10kernel-rt-debug-core6.12.0-211.60.1.el10_2ALSA-2026:71602
AlmaLinux:8kernel-rt-debug-core4.18.0-553.132.1.rt7.473.el8_10ALSA-2026:25120
AlmaLinux:9kernel-rt-debug-core5.14.0-687.10.1.el9_8ALSA-2026:19568
AlmaLinux:10kernel-rt-debug-devel6.12.0-211.60.1.el10_2ALSA-2026:71602
AlmaLinux:8kernel-rt-debug-devel4.18.0-553.132.1.rt7.473.el8_10ALSA-2026:25120
AlmaLinux:9kernel-rt-debug-devel5.14.0-687.10.1.el9_8ALSA-2026:19568
AlmaLinux:10kernel-rt-debug-modules6.12.0-211.60.1.el10_2ALSA-2026:71602
AlmaLinux:8kernel-rt-debug-modules4.18.0-553.132.1.rt7.473.el8_10ALSA-2026:25120
AlmaLinux:9kernel-rt-debug-modules5.14.0-687.10.1.el9_8ALSA-2026:19568
AlmaLinux:10kernel-rt-debug-modules-core6.12.0-211.60.1.el10_2ALSA-2026:71602
AlmaLinux:9kernel-rt-debug-modules-core5.14.0-687.10.1.el9_8ALSA-2026:19568
AlmaLinux:10kernel-rt-debug-modules-extra6.12.0-211.60.1.el10_2ALSA-2026:71602
AlmaLinux:8kernel-rt-debug-modules-extra4.18.0-553.132.1.rt7.473.el8_10ALSA-2026:25120
AlmaLinux:9kernel-rt-debug-modules-extra5.14.0-687.10.1.el9_8ALSA-2026:19568
AlmaLinux:10kernel-rt-devel6.12.0-211.60.1.el10_2ALSA-2026:71602
AlmaLinux:8kernel-rt-devel4.18.0-553.132.1.rt7.473.el8_10ALSA-2026:25120
AlmaLinux:9kernel-rt-devel5.14.0-687.10.1.el9_8ALSA-2026:19568
AlmaLinux:10kernel-rt-modules6.12.0-211.60.1.el10_2ALSA-2026:71602
AlmaLinux:8kernel-rt-modules4.18.0-553.132.1.rt7.473.el8_10ALSA-2026:25120
AlmaLinux:9kernel-rt-modules5.14.0-687.10.1.el9_8ALSA-2026:19568
AlmaLinux:10kernel-rt-modules-core6.12.0-211.60.1.el10_2ALSA-2026:71602
AlmaLinux:9kernel-rt-modules-core5.14.0-687.10.1.el9_8ALSA-2026:19568
AlmaLinux:10kernel-rt-modules-extra6.12.0-211.60.1.el10_2ALSA-2026:71602
AlmaLinux:8kernel-rt-modules-extra4.18.0-553.132.1.rt7.473.el8_10ALSA-2026:25120
AlmaLinux:9kernel-rt-modules-extra5.14.0-687.10.1.el9_8ALSA-2026:19568
AlmaLinux:10kernel-tools6.12.0-211.60.1.el10_2ALSA-2026:71602
AlmaLinux:8kernel-tools4.18.0-553.132.1.el8_10ALSA-2026:25121
AlmaLinux:9kernel-tools5.14.0-687.10.1.el9_8ALSA-2026:19568
AlmaLinux:10kernel-tools-libs6.12.0-211.60.1.el10_2ALSA-2026:71602
AlmaLinux:8kernel-tools-libs4.18.0-553.132.1.el8_10ALSA-2026:25121
AlmaLinux:9kernel-tools-libs5.14.0-687.10.1.el9_8ALSA-2026:19568
AlmaLinux:10kernel-tools-libs-devel6.12.0-211.60.1.el10_2ALSA-2026:71602
AlmaLinux:8kernel-tools-libs-devel4.18.0-553.132.1.el8_10ALSA-2026:25121
AlmaLinux:9kernel-tools-libs-devel5.14.0-687.10.1.el9_8ALSA-2026:19568
AlmaLinux:10kernel-uki-virt6.12.0-211.60.1.el10_2ALSA-2026:71602
AlmaLinux:9kernel-uki-virt5.14.0-687.10.1.el9_8ALSA-2026:19568
AlmaLinux:10kernel-uki-virt-addons6.12.0-211.60.1.el10_2ALSA-2026:71602
AlmaLinux:9kernel-uki-virt-addons5.14.0-687.10.1.el9_8ALSA-2026:19568
AlmaLinux:10kernel-zfcpdump6.12.0-211.60.1.el10_2ALSA-2026:71602
AlmaLinux:8kernel-zfcpdump4.18.0-553.132.1.el8_10ALSA-2026:25121
AlmaLinux:9kernel-zfcpdump5.14.0-687.10.1.el9_8ALSA-2026:19568
AlmaLinux:10kernel-zfcpdump-core6.12.0-211.60.1.el10_2ALSA-2026:71602
AlmaLinux:8kernel-zfcpdump-core4.18.0-553.132.1.el8_10ALSA-2026:25121
AlmaLinux:9kernel-zfcpdump-core5.14.0-687.10.1.el9_8ALSA-2026:19568
AlmaLinux:10kernel-zfcpdump-devel6.12.0-211.60.1.el10_2ALSA-2026:71602
AlmaLinux:8kernel-zfcpdump-devel4.18.0-553.132.1.el8_10ALSA-2026:25121
AlmaLinux:9kernel-zfcpdump-devel5.14.0-687.10.1.el9_8ALSA-2026:19568
AlmaLinux:10kernel-zfcpdump-devel-matched6.12.0-211.60.1.el10_2ALSA-2026:71602
AlmaLinux:9kernel-zfcpdump-devel-matched5.14.0-687.10.1.el9_8ALSA-2026:19568
AlmaLinux:10kernel-zfcpdump-modules6.12.0-211.60.1.el10_2ALSA-2026:71602
AlmaLinux:8kernel-zfcpdump-modules4.18.0-553.132.1.el8_10ALSA-2026:25121
AlmaLinux:9kernel-zfcpdump-modules5.14.0-687.10.1.el9_8ALSA-2026:19568
AlmaLinux:10kernel-zfcpdump-modules-core6.12.0-211.60.1.el10_2ALSA-2026:71602
AlmaLinux:9kernel-zfcpdump-modules-core5.14.0-687.10.1.el9_8ALSA-2026:19568
AlmaLinux:10kernel-zfcpdump-modules-extra6.12.0-211.60.1.el10_2ALSA-2026:71602
AlmaLinux:8kernel-zfcpdump-modules-extra4.18.0-553.132.1.el8_10ALSA-2026:25121
AlmaLinux:9kernel-zfcpdump-modules-extra5.14.0-687.10.1.el9_8ALSA-2026:19568
AlmaLinux:10libperf6.12.0-211.60.1.el10_2ALSA-2026:71602
AlmaLinux:9libperf5.14.0-687.10.1.el9_8ALSA-2026:19568
AlmaLinux:10perf6.12.0-211.60.1.el10_2ALSA-2026:71602
AlmaLinux:8perf4.18.0-553.132.1.el8_10ALSA-2026:25121
AlmaLinux:9perf5.14.0-687.10.1.el9_8ALSA-2026:19568
AlmaLinux:10python3-perf6.12.0-211.60.1.el10_2ALSA-2026:71602
AlmaLinux:8python3-perf4.18.0-553.132.1.el8_10ALSA-2026:25121
AlmaLinux:9python3-perf5.14.0-687.10.1.el9_8ALSA-2026:19568
AlmaLinux:10rtla6.12.0-211.60.1.el10_2ALSA-2026:71602
AlmaLinux:9rtla5.14.0-687.10.1.el9_8ALSA-2026:19568
AlmaLinux:10rv6.12.0-211.60.1.el10_2ALSA-2026:71602
AlmaLinux:9rv5.14.0-687.10.1.el9_8ALSA-2026:19568
Debian:12linux6.1.162-1DEBIAN-CVE-2026-22990
Debian:13linux6.12.69-1DEBIAN-CVE-2026-22990
Debian:14linux6.18.8-1DEBIAN-CVE-2026-22990
Rocky Linux:10kernel0:6.12.0-211.60.1.el10_2RLSA-2026:71602
Rocky Linux:8kernel0:4.18.0-553.132.1.el8_10RLSA-2026:25121
Rocky Linux:8kernel0:4.18.0-553.132.1.el8_10.cloud.0.1RXSA-2026:25121
Rocky Linux:9kernel0:5.14.0-687.10.1.el9_8.0.1RLSA-2026:19568
Rocky Linux:8kernel-rt0:4.18.0-553.132.1.rt7.473.el8_10RLSA-2026:25120
Ubuntu:22.04:LTSlinux5.15.0-173.183UBUNTU-CVE-2026-22990
Ubuntu:24.04:LTSlinux6.8.0-117.117UBUNTU-CVE-2026-22990
Ubuntu:25.10linuxno fix listedUBUNTU-CVE-2026-22990
Ubuntu:22.04:LTSlinux-allwinner-5.19no fix listedUBUNTU-CVE-2026-22990
Ubuntu:22.04:LTSlinux-aws5.15.0-1103.110UBUNTU-CVE-2026-22990
Ubuntu:24.04:LTSlinux-aws6.8.0-1055.58UBUNTU-CVE-2026-22990
Ubuntu:25.10linux-awsno fix listedUBUNTU-CVE-2026-22990
Ubuntu:22.04:LTSlinux-aws-5.19no fix listedUBUNTU-CVE-2026-22990

Affected products (as reported)

VendorProductVersions
Linux Linux f24e9980eb860d8600cbe5ef3d2fd9295320d229 – before 9aa0b0c14cefece078286d78b97d4c09685e372df24e9980eb860d8600cbe5ef3d2fd9295320d229 – before 4b106fbb1c7b841cd402abd83eb2447164c799eaf24e9980eb860d8600cbe5ef3d2fd9295320d229 – before 6afd2a4213524bc742b709599a3663aeaf77193cf24e9980eb860d8600cbe5ef3d2fd9295320d229 – before d3613770e2677683e65d062da5e31f48c409abe9f24e9980eb860d8600cbe5ef3d2fd9295320d229 – before 6c6cec3db3b418c4fdf815731bc39e46dff75e1bf24e9980eb860d8600cbe5ef3d2fd9295320d229 – before 6348d70af847b79805374fe628d3809a63fd7df3f24e9980eb860d8600cbe5ef3d2fd9295320d229 – before e00c3f71b5cf75681dbd74ee3f982a99cb690c2b
Linux Linux 2.6.34

Weakness: CWE-400 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

References