CVE-2025-68283
High
Description
In the Linux kernel, the following vulnerability has been resolved: libceph: replace BUG_ON with bounds check for map->max_osd OSD indexes come from untrusted network packets. Boundary checks are added to validate these against map->max_osd. [ idryomov: drop BUG_ON in ceph_get_primary_affinity(), minor cosmetic edits ]
SeverityHigh
CVSS7.5
Exploit probability—
Product
Linux
PublishedDec 16, 2025
First seenDec 16, 2025
How to fix
Update
- Linux Linux57f5fbae9f1024aba17ff75e00433324115c548a, becc488a4d864db338ebd4e313aa3c77da24b604, e67e3be690f5f7e3b031cf29e8d91e6d02a8e30d, b4368b7f97014e1015445d61abd0b27c4c6e8424, ec3797f043756a94ea2d0f106022e14ac4946c02 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | f24e9980eb860d8600cbe5ef3d2fd9295320d229 ≤ v < 57f5fbae9f1024aba17ff75e00433324115c548a, f24e9980eb860d8600cbe5ef3d2fd9295320d229 ≤ v < becc488a4d864db338ebd4e313aa3c77da24b604, f24e9980eb860d8600cbe5ef3d2fd9295320d229 ≤ v < e67e3be690f5f7e3b031cf29e8d91e6d02a8e30d, f24e9980eb860d8600cbe5ef3d2fd9295320d229 ≤ v < b4368b7f97014e1015445d61abd0b27c4c6e8424, f24e9980eb860d8600cbe5ef3d2fd9295320d229 ≤ v < ec3797f043756a94ea2d0f106022e14ac4946c02, 2.6.34 | 57f5fbae9f1024aba17ff75e00433324115c548a, becc488a4d864db338ebd4e313aa3c77da24b604, e67e3be690f5f7e3b031cf29e8d91e6d02a8e30d, b4368b7f97014e1015445d61abd0b27c4c6e8424, ec3797f043756a94ea2d0f106022e14ac4946c02 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.