Skip to main content

Mondoo

Vulnerability Management
Technology
Services

Solutions

Financial Services
Manufacturing
Healthcare

Resources

Blog
Vulnerability Database
Documentation
GitHub

Company

About
Careers
Partners
Contact

Legal

Privacy
Terms
Imprint

© 2026 Mondoo, Inc.

Log in Get Assessment

Vulnerability IntelligenceUBUNTU-CVE-2026-22984

UBUNTU-CVE-2026-22984

CRITICAL9.8

In the Linux kernel, the following vulnerability has been resolved: libceph: prevent potential out-of-bounds reads in handle_auth_done() Perform an explicit bounds check on payload_len to avoid a poss

Published Jan 23, 2026

Modified 4 days ago

Fix available

Details

In the Linux kernel, the following vulnerability has been resolved: libceph: prevent potential out-of-bounds reads in handle_auth_done() Perform an explicit bounds check on payload_len to avoid a possible out-of-bounds access in the callout. [ idryomov: changelog ]

Affected Packages(188 packages)

linux-hwe-edge

Ubuntu 16.04 LTS

Affected versions:

4.10.0-14.16~16.04.14.10.0-19.21~16.04.14.10.0-20.22~16.04.14.10.0-21.23~16.04.14.10.0-22.24~16.04.14.10.0-24.28~16.04.14.10.0-26.30~16.04.14.11.0-13.19~16.04.14.11.0-14.20~16.04.14.13.0-16.19~16.04.3+13 more

linux-aws-5.0

Ubuntu 18.04 LTS

Affected versions:

5.0.0-1021.24~18.04.15.0.0-1022.25~18.04.15.0.0-1023.26~18.04.15.0.0-1024.27~18.04.15.0.0-1025.285.0.0-1027.30

linux-aws-5.3

Ubuntu 18.04 LTS

Affected versions:

5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1019.21~18.04.15.3.0-1023.25~18.04.15.3.0-1028.30~18.04.15.3.0-1030.32~18.04.15.3.0-1032.34~18.04.25.3.0-1033.355.3.0-1034.365.3.0-1035.37

linux-azure

Ubuntu 18.04 LTS

Affected versions:

4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1008.84.15.0-1009.94.15.0-1012.124.15.0-1013.134.15.0-1014.144.15.0-1018.184.15.0-1019.19+34 more

linux-azure-5.3

Ubuntu 18.04 LTS

Affected versions:

5.3.0-1007.8~18.04.15.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.15.3.0-1013.14~18.04.15.3.0-1016.17~18.04.15.3.0-1018.19~18.04.15.3.0-1019.20~18.04.15.3.0-1020.21~18.04.1+6 more

linux-azure-edge

Ubuntu 18.04 LTS

Affected versions:

4.18.0-1006.6~18.04.14.18.0-1007.7~18.04.14.18.0-1008.8~18.04.15.0.0-1012.12~18.04.2

linux-gcp

Ubuntu 18.04 LTS

Affected versions:

4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1008.84.15.0-1009.94.15.0-1010.104.15.0-1014.144.15.0-1015.154.15.0-1017.18+28 more

linux-gcp-5.3

Ubuntu 18.04 LTS

Affected versions:

5.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.15.3.0-1014.15~18.04.15.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1018.19~18.04.15.3.0-1020.22~18.04.15.3.0-1026.28~18.04.1+3 more

linux-gke-4.15

Ubuntu 18.04 LTS

Affected versions:

4.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.384.15.0-1037.394.15.0-1040.424.15.0-1041.434.15.0-1042.444.15.0-1044.46+23 more

linux-gke-5.4

Ubuntu 18.04 LTS

Affected versions:

5.4.0-1025.25~18.04.15.4.0-1027.28~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.15.4.0-1033.35~18.04.15.4.0-1035.37~18.04.15.4.0-1036.38~18.04.15.4.0-1037.39~18.04.15.4.0-1039.41~18.04.1+27 more

References(34)

https://git.kernel.org/linus/818156caffbf55cb4d368f9c3cac64e458fb49c9

https://git.kernel.org/stable/c/194cfe2af4d2a1de599d39dad636b47c2f6c2c96

https://git.kernel.org/stable/c/2802ef3380fa8c4a08cda51ec1f085b1a712e9e2

https://git.kernel.org/stable/c/2d653bb63d598ae4b096dd678744bdcc34ee89e8

https://git.kernel.org/stable/c/79fe3511db416d2f2edcfd93569807cb02736e5e

https://git.kernel.org/stable/c/818156caffbf55cb4d368f9c3cac64e458fb49c9

https://git.kernel.org/stable/c/ef208ea331ef688729f64089b895ed1b49e842e3

https://ubuntu.com/security/CVE-2026-22984

https://ubuntu.com/security/notices/USN-8096-1

https://ubuntu.com/security/notices/USN-8096-2

https://ubuntu.com/security/notices/USN-8096-3

https://ubuntu.com/security/notices/USN-8096-4

https://ubuntu.com/security/notices/USN-8096-5

https://ubuntu.com/security/notices/USN-8116-1

https://ubuntu.com/security/notices/USN-8141-1

https://ubuntu.com/security/notices/USN-8163-1

https://ubuntu.com/security/notices/USN-8163-2

https://ubuntu.com/security/notices/USN-8243-1

https://ubuntu.com/security/notices/USN-8278-1

https://ubuntu.com/security/notices/USN-8278-2

https://ubuntu.com/security/notices/USN-8289-1

https://ubuntu.com/security/notices/USN-8289-2

https://ubuntu.com/security/notices/USN-8296-1

https://ubuntu.com/security/notices/USN-8296-2

https://ubuntu.com/security/notices/USN-8393-1

CVSS Analysis

CVSS v4.0

Exploitability

Attack Vector

NetworkAV:N

Attack Complexity

LowAC:L

Attack Requirements

PresentAT:P

Privileges Required

NonePR:N

User Interaction

NoneUI:N

Vulnerable System

Vuln. Confidentiality

NoneVC:N

Vuln. Integrity

NoneVI:N

Vuln. Availability

HighVA:H

Subsequent System

Subseq. Confidentiality

NoneSC:N

Subseq. Integrity

NoneSI:N

Subseq. Availability

NoneSA:N

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Upstream

Related

USN-8096-1 USN-8096-2 USN-8096-3 USN-8096-4 USN-8096-5 USN-8116-1 USN-8141-1 USN-8163-1 USN-8163-2 USN-8243-1 USN-8278-1 USN-8278-2 USN-8289-1 USN-8289-2 USN-8296-1 USN-8296-2 USN-8393-1 USN-8440-1 USN-8490-1 USN-8490-2 USN-8491-1 USN-8499-1 USN-8508-1 USN-8545-1 USN-8546-1

Ecosystems(13)

Ubuntu 16.04 LTS Ubuntu 18.04 LTS Ubuntu 20.04 LTS Ubuntu 22.04 LTS Ubuntu 24.04 LTS

Timeline

PublishedJan 23, 2026

ModifiedJul 17, 2026

UBUNTU-CVE-2026-22984 | Mondoo Vulnerability Intelligence