Back Linuxsecurity Fedora 44 Ceph 20.2.4 Authentication Bypass CVE-2025
Find practical guidance for preventing, investigating, and responding to Linux security problems. Review Linux Privileges ×
Ceph is a massively scalable, open-source, distributed storage system that runs
on commodity hardware and delivers object, block and file system storage.
Ceph 20.2.4 GA CVE-2025-30156 is an authentication bypass in CephX caused by misuse of AES-CBC. CVE-2026-39944 shares the unauthenticated-encryption root cause of CVE-2025-30156 CVE-2026-50152 is an improper authorization flaw in the Ceph Monitor subscription handler. CVE-2026-54330 is a flaw in RGW not properly verifying its SigV4 cryptographic signatures in RGW's SigV4 verifier.
* Wed Aug 19 2026 Kaleb S. KEITHLEY - 2:20.2.4-1 - Ceph 20.2.4 GA
* Wed Aug 19 2026 Kaleb S. KEITHLEY - 2:20.2.4-1 - Ceph 20.2.4 GA
Fedora Update Notification FEDORA-2026-7de7d03796 2026-08-22 01:23:52.923682+00:00 Name : ceph Product : Fedora 44 Version : 20.2.4 Release : 1.fc44 URL : Summary : User space components of the Ceph file system Description : Ceph is a massively scalable, open-source, distributed storage system that runs on commodity hardware and delivers object, block and file system storage.
This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-7de7d03796' at the command line. For more information, refer to the dnf documentation available at
Get the latest Linux and open source security news straight to your inbox.
The full story
This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.
