Log in Start free

Vulnerability · Published May 8, 2026 · Assigned by Linux

CVE-2026-43304libceph: define and enforce CEPH_MAX_KEY_LEN

Critical 9.8

In plain English

A critical-severity stack buffer overflow in Linux from Linux. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.6% (higher than 50% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)9.8Critical
Exploit odds (30 days)0.6%top 50.4% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

In the Linux kernel, the following vulnerability has been resolved: libceph: define and enforce CEPH_MAX_KEY_LEN When decoding the key, verify that the key material would fit into a fixed-size buffer in process_auth_done() and generally has a sane length. The new CEPH_MAX_KEY_LEN check replaces the existing check for a key with no key material which is a) not universal since CEPH_CRYPTO_NONE has to be excluded and b) doesn't provide much value since a smaller than needed key is just as invalid as no key -- this has to be handled elsewhere anyway.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Debian:12linux6.1.170-1DEBIAN-CVE-2026-43304
Debian:13linux6.12.85-1DEBIAN-CVE-2026-43304
Debian:14linux6.19.6-1DEBIAN-CVE-2026-43304
Ubuntu:22.04:LTSlinux5.15.0-185.195UBUNTU-CVE-2026-43304
Ubuntu:24.04:LTSlinux6.8.0-134.134UBUNTU-CVE-2026-43304
Ubuntu:25.10linux6.17.0-40.40UBUNTU-CVE-2026-43304
Ubuntu:25.10linux6.17.0-40.40USN-8490-1
Ubuntu:22.04:LTSlinux-allwinner-5.19no fix listedUBUNTU-CVE-2026-43304
Ubuntu:22.04:LTSlinux-aws5.15.0-1111.118UBUNTU-CVE-2026-43304
Ubuntu:24.04:LTSlinux-aws6.8.0-1060.63UBUNTU-CVE-2026-43304
Ubuntu:25.10linux-aws6.17.0-1019.19USN-8490-1
Ubuntu:25.10linux-aws6.17.0-1019.19UBUNTU-CVE-2026-43304
Ubuntu:22.04:LTSlinux-aws-5.19no fix listedUBUNTU-CVE-2026-43304
Ubuntu:24.04:LTSlinux-aws-6.14no fix listedUBUNTU-CVE-2026-43304
Ubuntu:24.04:LTSlinux-aws-6.176.17.0-1019.19~24.04.1USN-8490-1
Ubuntu:24.04:LTSlinux-aws-6.176.17.0-1019.19~24.04.1UBUNTU-CVE-2026-43304
Ubuntu:22.04:LTSlinux-aws-6.2no fix listedUBUNTU-CVE-2026-43304
Ubuntu:22.04:LTSlinux-aws-6.5no fix listedUBUNTU-CVE-2026-43304
Ubuntu:22.04:LTSlinux-aws-6.86.8.0-1060.63~22.04.1UBUNTU-CVE-2026-43304
Ubuntu:22.04:LTSlinux-azure5.15.0-1116.125UBUNTU-CVE-2026-43304
Ubuntu:24.04:LTSlinux-azure6.8.0-1063.71UBUNTU-CVE-2026-43304
Ubuntu:25.10linux-azureno fix listedUBUNTU-CVE-2026-43304
Ubuntu:22.04:LTSlinux-azure-5.19no fix listedUBUNTU-CVE-2026-43304
Ubuntu:24.04:LTSlinux-azure-6.11no fix listedUBUNTU-CVE-2026-43304
Ubuntu:24.04:LTSlinux-azure-6.14no fix listedUBUNTU-CVE-2026-43304
Ubuntu:24.04:LTSlinux-azure-6.176.17.0-1021.21~24.04.1UBUNTU-CVE-2026-43304
Ubuntu:22.04:LTSlinux-azure-6.2no fix listedUBUNTU-CVE-2026-43304
Ubuntu:22.04:LTSlinux-azure-6.5no fix listedUBUNTU-CVE-2026-43304
Ubuntu:22.04:LTSlinux-azure-6.86.8.0-1063.71~22.04.1UBUNTU-CVE-2026-43304
Ubuntu:22.04:LTSlinux-azure-fde5.15.0-1116.125UBUNTU-CVE-2026-43304
Ubuntu:24.04:LTSlinux-azure-fde6.8.0-1062.69UBUNTU-CVE-2026-43304
Ubuntu:25.10linux-azure-fdeno fix listedUBUNTU-CVE-2026-43304
Ubuntu:22.04:LTSlinux-azure-fde-5.19no fix listedUBUNTU-CVE-2026-43304
Ubuntu:24.04:LTSlinux-azure-fde-6.14no fix listedUBUNTU-CVE-2026-43304
Ubuntu:22.04:LTSlinux-azure-fde-6.2no fix listedUBUNTU-CVE-2026-43304
Ubuntu:22.04:LTSlinux-azure-fde-6.86.8.0-1062.69~22.04.1UBUNTU-CVE-2026-43304
Ubuntu:24.04:LTSlinux-azure-nvidiano fix listedUBUNTU-CVE-2026-43304
Ubuntu:24.04:LTSlinux-azure-nvidia-6.14no fix listedUBUNTU-CVE-2026-43304
Ubuntu:22.04:LTSlinux-gcp5.15.0-1111.121UBUNTU-CVE-2026-43304
Ubuntu:24.04:LTSlinux-gcp6.8.0-1063.69UBUNTU-CVE-2026-43304
Ubuntu:25.10linux-gcp6.17.0-1020.22USN-8490-1
Ubuntu:25.10linux-gcp6.17.0-1020.22UBUNTU-CVE-2026-43304
Ubuntu:22.04:LTSlinux-gcp-5.19no fix listedUBUNTU-CVE-2026-43304
Ubuntu:24.04:LTSlinux-gcp-6.11no fix listedUBUNTU-CVE-2026-43304
Ubuntu:24.04:LTSlinux-gcp-6.14no fix listedUBUNTU-CVE-2026-43304
Ubuntu:24.04:LTSlinux-gcp-6.176.17.0-1020.22~24.04.1UBUNTU-CVE-2026-43304
Ubuntu:24.04:LTSlinux-gcp-6.176.17.0-1020.22~24.04.1USN-8490-1
Ubuntu:22.04:LTSlinux-gcp-6.2no fix listedUBUNTU-CVE-2026-43304
Ubuntu:22.04:LTSlinux-gcp-6.5no fix listedUBUNTU-CVE-2026-43304
Ubuntu:22.04:LTSlinux-gcp-6.86.8.0-1063.69~22.04.1UBUNTU-CVE-2026-43304
Ubuntu:22.04:LTSlinux-gke5.15.0-1107.113UBUNTU-CVE-2026-43304
Ubuntu:24.04:LTSlinux-gke6.8.0-1058.64UBUNTU-CVE-2026-43304
Ubuntu:22.04:LTSlinux-gkeop5.15.0-1094.102UBUNTU-CVE-2026-43304
Ubuntu:24.04:LTSlinux-gkeop6.8.0-1045.48UBUNTU-CVE-2026-43304
Ubuntu:22.04:LTSlinux-hwe-5.19no fix listedUBUNTU-CVE-2026-43304
Ubuntu:24.04:LTSlinux-hwe-6.11no fix listedUBUNTU-CVE-2026-43304
Ubuntu:24.04:LTSlinux-hwe-6.14no fix listedUBUNTU-CVE-2026-43304
Ubuntu:24.04:LTSlinux-hwe-6.176.17.0-40.40~24.04.1USN-8545-1
Ubuntu:24.04:LTSlinux-hwe-6.176.17.0-40.40~24.04.1UBUNTU-CVE-2026-43304
Ubuntu:22.04:LTSlinux-hwe-6.2no fix listedUBUNTU-CVE-2026-43304
Ubuntu:22.04:LTSlinux-hwe-6.5no fix listedUBUNTU-CVE-2026-43304
Ubuntu:22.04:LTSlinux-hwe-6.86.8.0-136.136~22.04.1UBUNTU-CVE-2026-43304
Ubuntu:22.04:LTSlinux-ibm5.15.0-1105.109UBUNTU-CVE-2026-43304
Ubuntu:24.04:LTSlinux-ibm6.8.0-1060.61UBUNTU-CVE-2026-43304
Ubuntu:22.04:LTSlinux-ibm-6.86.8.0-1060.61~22.04.1UBUNTU-CVE-2026-43304
Ubuntu:22.04:LTSlinux-intel-iot-realtimeno fix listedUBUNTU-CVE-2026-43304
Ubuntu:22.04:LTSlinux-intel-iotg5.15.0-1106.112UBUNTU-CVE-2026-43304
Ubuntu:22.04:LTSlinux-kvm5.15.0-1103.108UBUNTU-CVE-2026-43304
Ubuntu:22.04:LTSlinux-lowlatency5.15.0-183.193UBUNTU-CVE-2026-43304
Ubuntu:24.04:LTSlinux-lowlatency6.8.0-134.134.1UBUNTU-CVE-2026-43304
Ubuntu:22.04:LTSlinux-lowlatency-hwe-5.19no fix listedUBUNTU-CVE-2026-43304
Ubuntu:24.04:LTSlinux-lowlatency-hwe-6.11no fix listedUBUNTU-CVE-2026-43304
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.2no fix listedUBUNTU-CVE-2026-43304
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.5no fix listedUBUNTU-CVE-2026-43304
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.86.8.0-134.134.1~22.04.1UBUNTU-CVE-2026-43304
Ubuntu:22.04:LTSlinux-nvidia5.15.0-1106.107UBUNTU-CVE-2026-43304
Ubuntu:24.04:LTSlinux-nvidia6.8.0-1058.61UBUNTU-CVE-2026-43304
Ubuntu:24.04:LTSlinux-nvidia-6.11no fix listedUBUNTU-CVE-2026-43304
Ubuntu:24.04:LTSlinux-nvidia-6.176.17.0-1026.26UBUNTU-CVE-2026-43304
Ubuntu:22.04:LTSlinux-nvidia-6.2no fix listedUBUNTU-CVE-2026-43304
Ubuntu:22.04:LTSlinux-nvidia-6.5no fix listedUBUNTU-CVE-2026-43304
Ubuntu:22.04:LTSlinux-nvidia-6.86.8.0-1058.61~22.04.1UBUNTU-CVE-2026-43304
Ubuntu:24.04:LTSlinux-nvidia-lowlatency6.8.0-1058.61.1UBUNTU-CVE-2026-43304
Ubuntu:22.04:LTSlinux-nvidia-tegra5.15.0-1063.63UBUNTU-CVE-2026-43304
Ubuntu:24.04:LTSlinux-nvidia-tegra6.8.0-1029.30UBUNTU-CVE-2026-43304
Ubuntu:22.04:LTSlinux-nvidia-tegra-igx5.15.0-1052.52UBUNTU-CVE-2026-43304
Ubuntu:22.04:LTSlinux-oem-5.17no fix listedUBUNTU-CVE-2026-43304
Ubuntu:22.04:LTSlinux-oem-6.0no fix listedUBUNTU-CVE-2026-43304
Ubuntu:22.04:LTSlinux-oem-6.1no fix listedUBUNTU-CVE-2026-43304
Ubuntu:24.04:LTSlinux-oem-6.11no fix listedUBUNTU-CVE-2026-43304
Ubuntu:24.04:LTSlinux-oem-6.14no fix listedUBUNTU-CVE-2026-43304
Ubuntu:24.04:LTSlinux-oem-6.176.17.0-1028.28USN-8491-1
Ubuntu:24.04:LTSlinux-oem-6.176.17.0-1028.28UBUNTU-CVE-2026-43304
Ubuntu:22.04:LTSlinux-oem-6.5no fix listedUBUNTU-CVE-2026-43304
Ubuntu:24.04:LTSlinux-oem-6.8no fix listedUBUNTU-CVE-2026-43304
Ubuntu:22.04:LTSlinux-oracle5.15.0-1108.114UBUNTU-CVE-2026-43304
Ubuntu:24.04:LTSlinux-oracle6.8.0-1057.58UBUNTU-CVE-2026-43304
Ubuntu:25.10linux-oracle6.17.0-1018.18USN-8490-1
Ubuntu:25.10linux-oracle6.17.0-1018.18UBUNTU-CVE-2026-43304
Ubuntu:24.04:LTSlinux-oracle-6.14no fix listedUBUNTU-CVE-2026-43304
Ubuntu:24.04:LTSlinux-oracle-6.176.17.0-1018.18~24.04.1USN-8490-1
Ubuntu:24.04:LTSlinux-oracle-6.176.17.0-1018.18~24.04.1UBUNTU-CVE-2026-43304
Ubuntu:22.04:LTSlinux-oracle-6.5no fix listedUBUNTU-CVE-2026-43304
Ubuntu:22.04:LTSlinux-oracle-6.86.8.0-1057.58~22.04.1UBUNTU-CVE-2026-43304
Ubuntu:22.04:LTSlinux-raspi5.15.0-1105.108UBUNTU-CVE-2026-43304
Ubuntu:24.04:LTSlinux-raspi6.8.0-1060.64UBUNTU-CVE-2026-43304
Ubuntu:25.10linux-raspi6.17.0-1021.21USN-8546-1
Ubuntu:25.10linux-raspi6.17.0-1021.21UBUNTU-CVE-2026-43304
Ubuntu:24.04:LTSlinux-raspi-realtimeno fix listedUBUNTU-CVE-2026-43304
Ubuntu:22.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2026-43304
Ubuntu:24.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2026-43304
Ubuntu:25.10linux-realtime6.17.0-1017.19USN-8490-2
Ubuntu:25.10linux-realtime6.17.0-1017.19UBUNTU-CVE-2026-43304
Ubuntu:22.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2026-43304
Ubuntu:24.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2026-43304
Ubuntu:25.10linux-riscv6.17.0-40.40.1UBUNTU-CVE-2026-43304
Ubuntu:22.04:LTSlinux-riscv-5.19no fix listedUBUNTU-CVE-2026-43304
Ubuntu:24.04:LTSlinux-riscv-6.14no fix listedUBUNTU-CVE-2026-43304
Ubuntu:24.04:LTSlinux-riscv-6.17no fix listedUBUNTU-CVE-2026-43304
Ubuntu:22.04:LTSlinux-riscv-6.5no fix listedUBUNTU-CVE-2026-43304
Ubuntu:22.04:LTSlinux-riscv-6.86.8.0-134.134~22.04.1UBUNTU-CVE-2026-43304
Ubuntu:22.04:LTSlinux-starfive-5.19no fix listedUBUNTU-CVE-2026-43304
Ubuntu:22.04:LTSlinux-starfive-6.2no fix listedUBUNTU-CVE-2026-43304
Ubuntu:22.04:LTSlinux-starfive-6.5no fix listedUBUNTU-CVE-2026-43304
Ubuntu:24.04:LTSlinux-xilinx6.8.0-1032.33UBUNTU-CVE-2026-43304
Ubuntu:22.04:LTSlinux-xilinx-zynqmp5.15.0-1074.78UBUNTU-CVE-2026-43304

Affected products (as reported)

VendorProductVersions
Linux Linux cd1a677cad994021b19665ed476aea63f5d54f31 – before 6405e8c680974bb74e2c98d5249fb52c7b12a6c6cd1a677cad994021b19665ed476aea63f5d54f31 – before 8d745d38c88ecbed95f6b2b39857bf89f35a3244cd1a677cad994021b19665ed476aea63f5d54f31 – before e1dc45d97975f9db65694d234fbddf1915176e16cd1a677cad994021b19665ed476aea63f5d54f31 – before 1b275bd49e58752efb83767a5d1aed41356c5e64cd1a677cad994021b19665ed476aea63f5d54f31 – before c1a0f5f1e5e7e98c36a362ec3d1fcfd9932931edcd1a677cad994021b19665ed476aea63f5d54f31 – before d82467c07b03a27c3c5469b62bb3b726305a80bbcd1a677cad994021b19665ed476aea63f5d54f31 – before ac431d597a9bdfc2ba6b314813f29a6ef2b4a3bf
Linux Linux 5.11

Weakness: CWE-121 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References