NULL Pointer Dereference in Linux Kernel Affecting libceph Functionality

CVE-2026-22991

What is CVE-2026-22991?

A vulnerability within the Linux kernel's libceph impacts the free_choose_arg_map() function by risking a NULL pointer dereference. This issue arises when its caller encounters an error after a partial memory allocation, specifically in the decode_choose_args() function. When allocation of arg_map->args fails, control shifts to a failure label calling free_choose_arg_map(), which may blindly attempt to iterate over arg_map->args. As arg_map->size is updated to a non-zero value before the allocation, it leads to a breach where free_choose_arg_map() can dereference a NULL pointer. To mitigate this risk, enhancements include implementing checks for valid pointers prior to iteration, thus increasing the resilience of free_choose_arg_map() against potential errors.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References