Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
Ceph 18.2.2-13 can crash or hang due to crypto bug
published 21 days ago
Summary
The Ceph storage software version 18.2.2-13 includes a problem in its virtual host crypto component. If the system fails to map a guest data request, it may follow an invalid pointer, causing the Ceph process to stop responding or terminate. Update Ceph to a version that includes the fix or apply the vendor's recommended patch as soon as possible.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Azure Linux:3 | azure | ceph | <= 18.2.2-13 |
Original advisory text
CVE-2026-86847 affecting package ceph 18.2.2-13
A flaw was found in DPDK lib/vhost vhost-crypto. Write-back chain cleanup can follow an uninitialized next pointer when mapping a guest descriptor fails, causing the host vhost-crypto process to hang or crash.
References
Timeline
Published14 Oct 2026
Updated17 Oct 2026
First seen17 Oct 2026
Sources
AZL-108327 · OSV
Track software like this
Free during beta