Bounds Check Vulnerability in Linux Kernel Affecting Ceph

CVE-2025-68283

What is CVE-2025-68283?

A boundary check vulnerability has been identified in the Linux kernel's Ceph module, specifically concerning the handling of object storage device (OSD) indexes derived from untrusted network packets. This issue was addressed by implementing bounds checks to ensure that OSD indexes do not exceed the maximum allowable value defined by the map, thus enhancing the module's robustness against potentially malicious inputs.

References