CVE-2026-23136

Advisory lineage Upstream: 0 Downstream: 16
Modified
Published: 14 Feb 2026, 15:22
Last modified:11 May 2026, 22:00

Vulnerability Summary

Overall Risk (default)
medium
30/100
CVSS Score
7.5 HIGH
v3.1 (cve.org)
EPSS Score
0.04% LOW
0% probability 0.00%
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

14 Feb 2026, 15:22
Published
Vulnerability first disclosed
11 May 2026, 22:00
Last Modified
Vulnerability information updated

Description

In the Linux kernel, the following vulnerability has been resolved: libceph: reset sparse-read state in osd_fault() When a fault occurs, the connection is abandoned, reestablished, and any pending operations are retried. The OSD client tracks the progress of a sparse-read reply using a separate state machine, largely independent of the messenger's state. If a connection is lost mid-payload or the sparse-read state machine returns an error, the sparse-read state is not reset. The OSD client will then interpret the beginning of a new reply as the continuation of the old one. If this makes the sparse-read machinery enter a failure state, it may never recover, producing loops like: libceph: [0] got 0 extents libceph: data len 142248331 != extent len 0 libceph: osd0 (1)...:6801 socket error on read libceph: data len 142248331 != extent len 0 libceph: osd0 (1)...:6801 socket error on read Therefore, reset the sparse-read state in osd_fault(), ensuring retries start from a clean state.

CVSS Metrics

  • v3.1•MEDIUM•Score: 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
  • v3.1•HIGH•Score: 7.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS Trends

Current EPSS score: 0.04%• Percentile: 13%

Affected Systems

  • linux•linux

    ≥ f628d799972799023d32c2542bb2639eb8c4f84e, < 90a60fe61908afa0eaf7f8fcf1421b9b50e5f7ff | ≥ f628d799972799023d32c2542bb2639eb8c4f84e, < e94075e950a6598e710b9f7dffea5aa388f40313 | ≥ f628d799972799023d32c2542bb2639eb8c4f84e, < 10b7c72810364226f7b27916ea3e2a4f870bc04b | ≥ f628d799972799023d32c2542bb2639eb8c4f84e, < 11194b416ef95012c2cfe5f546d71af07b639e93 | 6.6

  • linux•linux_kernel

    ≥ 6.6, < 6.6.121 | ≥ 6.7, < 6.12.66 | ≥ 6.13, < 6.18.6 | 6.19:rc1 | 6.19:rc2 | 6.19:rc3 | 6.19:rc4

References (4)