SB20260912139 - Out-of-bounds read in Linux kernel ceph

Description

This security bulletin contains information about 1 vulnerability.

1) Out-of-bounds read (CVE-ID: CVE-2026-89649)

CWE-ID: CWE-125 - Out-of-bounds read

CVSSv4: 6.7 [CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N]

The vulnerability allows a remote user to disclose sensitive information.

The vulnerability exists due to an out-of-bounds read in the CephFS __build_xattrs() function when processing metadata-server-supplied extended attribute blobs. A remote privileged user can provide a crafted extended attribute blob with a final attribute value length that exceeds the available data to disclose sensitive information.

A local user must invoke getxattr(2) on a CephFS file.

Remediation

Install update from vendor's website.

References

• https://git.kernel.org/stable/c/1dd356310b1660215f9a3626580bf8b363ef981e
• https://git.kernel.org/stable/c/38be2f3c41ecaba58bb92dc16603e09ba9fd64f1
• https://git.kernel.org/stable/c/68d541754d6cd3bb98d1fd8314f57e5eb533557d
• https://git.kernel.org/stable/c/b12b3320c81fd72ab36388fb2445fec9c3038f10