https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 19:33:20 +0000 https://vulnerability.circl.lu/vuln/cve-2026-43304 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>libceph: define and enforce CEPH_MAX_KEY_LEN</p> <p>When decoding the key, verify that the key material would fit into a fixed-size buffer in process_auth_done() and generally has a sane length.</p> <p>The new CEPH_MAX_KEY_LEN check replaces the existing check for a key with no key material which is a) not universal since CEPH_CRYPTO_NONE has to be excluded and b) doesn&#39;t provide much value since a smaller than needed key is just as invalid as no key -- this has to be handled elsewhere anyway.</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>libceph: define and enforce CEPH_MAX_KEY_LEN</p> <p>When decoding the key, verify that the key material would fit into a fixed-size buffer in process_auth_done() and generally has a sane length.</p> <p>The new CEPH_MAX_KEY_LEN check replaces the existing check for a key with no key material which is a) not universal since CEPH_CRYPTO_NONE has to be excluded and b) doesn&#39;t provide much value since a smaller than needed key is just as invalid as no key -- this has to be handled elsewhere anyway.</p> https://vulnerability.circl.lu/vuln/cve-2026-43304