Detections
Analytics

Chainguard: linux-qemu-melange: security update to 6.18.49-r2

high Tenable Self-Hosted Container Security Plugin ID 472540

Description

There are packages installed that are affected by a vulnerability referenced in the following CVE:

 - In the Linux kernel, the following vulnerability has been resolved: libceph: Fix potential out-of-bounds
 access in __ceph_x_decrypt() In __ceph_x_decrypt(), a part of the buffer p is interpreted as a
 ceph_x_encrypt_header, and the magic field of this struct is accessed. This happens without any guarantee
 that the buffer is large enough to hold this struct. The function parameter ciphertext_len represents the
 length of the ciphertext to decrypt and is guaranteed to be at most the remaining size of the allocated
 buffer p. However, this value is not necessarily greater than sizeof(ceph_x_encrypt_header). E.g., a
 message frame of type FRAME_TAG_AUTH_REPLY_MORE, that is just as long to hold the ciphertext at its end
 with a ciphertext_len of 8 or less, can trigger an out-of-bounds memory access when accessing hdr->magic.
 This patch fixes the issue by adding a check to ensure that the decrypted plaintext in the buffer is large
 enough to represent at least the ceph_x_encrypt_header. (CVE-2026-52956)

Solution

Update the linux-qemu-melange library and its related packages to version 6.18.49-r2 or later.

Plugin Details

Severity: High

ID: 472540

Version: Revision 1.1

Type: Local

Published: 10/3/2026

Updated: 10/3/2026

Risk Information

VPR

Risk Factor: Low

Score: 3

Percentile: 23.75

CVSS v2

Risk Factor: High

Base Score: 7.8

Temporal Score: 5.8

Vector: CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:C

CVSS Score Source: CVE-2026-52956

CVSS v3

Risk Factor: High

Base Score: 7.5

Temporal Score: 6.5

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

Vulnerability Information

Exploit Ease: No known exploits are available

Vulnerability Publication Date: 6/24/2026

Reference Information

CVE: CVE-2026-52956