CVE-2026-43304
CriticalSummary
A vulnerability in the Linux kernel related to the libceph library has been resolved, concerning key length verification. The new CEPH_MAX_KEY_LEN check ensures that the key material fits into a fixed-size buffer.
Risk Assessment
Insufficient key length verification may lead to buffer overflow, posing a risk of executing malicious code. Organizations should be aware of potential data security threats.
Recommendation
It is recommended to update the Linux kernel to the latest version to benefit from the fixes related to key length verification in the libceph library.
Original NVD description (English source)
In the Linux kernel, the following vulnerability has been resolved: libceph: define and enforce CEPH_MAX_KEY_LEN When decoding the key, verify that the key material would fit into a fixed-size buffer in process_auth_done() and generally has a sane length. The new CEPH_MAX_KEY_LEN check replaces t