Public bug reported: ------ Context A first step to fix https://ubuntu.com/security/CVE-2025-30156 is to build ceph-common packages with ceph 19.2.6+ and 20.2.4+. That will fix allowing the use of aes256 keys on the user space
For Ubuntu Noble (24.04) there is a build with 19.2.6 for the proposed channel https://launchpad.net/ubuntu/noble/+package/ceph-common For Ubuntu Resolut (26.04) it seems to be behind https://launchpad.net/ubuntu/resolute/+package/ceph-common Now, this also needs to be fixed on the kernel space, else it will complain about the length of the cephX keys used ------ Versions $ lsb_release -a | grep Release Release: 24.04 $ ceph --version ceph version 20.2.4 (7f793731f1b39eb4f465e960113d2363c311b964) tentacle (stable) $ uname -r 6.8.0-138-generic ------ Reproduce error log $ rbd map rbd/gus1 rbd: failed to add secret 'client.admin' to kernel In some cases useful info is found in syslog - try "dmesg | tail". rbd: map failed: (22) Invalid argument $ dmesg | tail| [345785.965860] libceph: secret too big 32 ** Affects: linux (Ubuntu) Importance: Undecided Status: New -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/2166680 Title: 6.8.0 - rbd kernel module does not allow 256 cephx keys To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/linux/+bug/2166680/+subscriptions -- ubuntu-bugs mailing list [email protected] https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
