CVE-2025-68283

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2025-68283
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-68283.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2025-68283
Downstream
Related
Published
2025-12-16T15:06:05Z
Modified
2026-08-12T03:51:45Z
Severity
  • 7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
libceph: replace BUG_ON with bounds check for map->max_osd
Details

In the Linux kernel, the following vulnerability has been resolved:

libceph: replace BUG_ON with bounds check for map->max_osd

OSD indexes come from untrusted network packets. Boundary checks are added to validate these against map->max_osd.

[ idryomov: drop BUG_ON in ceph_get_primary_affinity(), minor cosmetic edits ]

Database specific 
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/68xxx/CVE-2025-68283.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
f24e9980eb860d8600cbe5ef3d2fd9295320d229
Fixed
57f5fbae9f1024aba17ff75e00433324115c548a
Fixed
becc488a4d864db338ebd4e313aa3c77da24b604
Fixed
e67e3be690f5f7e3b031cf29e8d91e6d02a8e30d
Fixed
b4368b7f97014e1015445d61abd0b27c4c6e8424
Fixed
ec3797f043756a94ea2d0f106022e14ac4946c02

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-68283.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
2.6.34
Fixed
6.1.159
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.6.119
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.12.61
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.17.11

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-68283.json"