CVE-2026-80558
In the Linux kernel, the following vulnerability has been resolved:
libceph: Avoid using invalid osd indices from primary_temp
A corrupted osdmap received from a Ceph monitor or OSD may contain osd
indices in its pg_temp, primary_temp, pg_upmap, and pg_upmap_items parts
that don't exist, i.e., that are greater than max_osd or smaller than
CEPH_HOMELESS_OSD (-1). These indices are used to create the up and
acting set in ceph_pg_to_up_acting_osds(), called from calc_target().
While most of these osd indices are checked, the one from primary_temp
is not. Subsequently, this may lead to calc_target() returning this
(potentially invalid) index as target osd for a (linger) request.
Because the osd_state, osd_weight, and osd_addr arrays only contain
max_osd entries (with indices 0 to max_osd -1), this leads to
out-of-bounds accesses when trying to read values from these arrays.
This patch fixes the issue by adding a check to get_temp_osds(), so that
only valid osd indices from primary_temp are used, and it falls back to
using the primary from pg_temp or the up set if it is invalid.
[ idryomov: changelog ]
CSIRTS triage
- What
- Input device registration ordering in the sur40 driver is incorrect, leading to potential device availability or cleanup issues.
- Who is affected
- Systems running Linux kernel with sur40 (Microsoft Surface 2.0 touch device) support enabled.
- Urgency
- Medium priority; CVSS 5.5 indicates moderate impact and should be patched in standard update cycles.
- Action
- Apply a Linux kernel update that corrects the input device registration order in the sur40 driver.
AI-assisted analysis generated from the source advisory — verify against the original.
⚡ Watch CVE-2026-80558
Get an email if CVE-2026-80558 is added to CISA KEV, gains public exploit code, or a new advisory cites it — max one per day, one-click unsubscribe.
Exploitation outlook
- Low exploitation risk0.52% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 42% of all EPSS-scored CVEs.
Advisory coverage (2)
- criticalCVE-2026-80558: In the Linux kernel, the following vulnerability has been resolved: libceph: Avoid using inval…nvd · 2026-08-26
- mediumCVE-2026-80558: libceph: Avoid using invalid osd indices from primary_tempmsrc · 2026-08-11
External references
Embed the live status
— this badge updates automatically when the KEV or exploit status changes. How to embed it →
[](https://www.csirts.com/cve/CVE-2026-80558)