CVE-2026-43273
Description
In the Linux kernel, the following vulnerability has been resolved: ceph: supply snapshot context in ceph_zero_partial_object() The ceph_zero_partial_object function was missing proper snapshot context for its OSD write operations, which could lead to data inconsistencies in snapshots. Reproducer: ../src/vstart.sh --new -x --localhost --bluestore ./bin/ceph auth caps client.fs_a mds 'allow rwps fsname=a' mon 'allow r fsname=a' osd 'allow rw tag cephfs data=a' mount -t ceph [email protected]=/ /mnt/mycephfs/ -o conf=./ceph.conf dd if=/dev/urandom of=/mnt/mycephfs/foo bs=64K count=1 mkdir /mnt/mycephfs/.snap/snap1 md5sum /mnt/mycephfs/.snap/snap1/foo fallocate -p -o 0 -l 4096 /mnt/mycephfs/foo echo 3 > /proc/sys/vm/drop/caches md5sum /mnt/mycephfs/.snap/snap1/foo # get different md5sum!!
How to fix
- linux linux_kernel5.10.252, 5.15.202, 6.1.165, 6.6.128, 6.12.75, 6.18.16, 6.19.6 or later
- git.kernel.org/stable/c/36673344b41c31fb502dd0d0113cec1aa96f581e
- git.kernel.org/stable/c/4097e70fc543cca72982854108a32f6ae924e727
- git.kernel.org/stable/c/531a76c5a2e44264cee8a70121e63eb28c1ba728
- git.kernel.org/stable/c/5788b742007f53406049bef917833a71ddd43f60
- git.kernel.org/stable/c/69e59a87bab0ea31ab2a584fc65e12dafacf8953
- git.kernel.org/stable/c/757873abfc8ea38592582180aed0f57f0f0cb07a
- git.kernel.org/stable/c/9efa154609cdb658f51c7d76b30a09f7e6485250
- git.kernel.org/stable/c/f16bd3fa74a2084ee7e16a8a2be7e7399b970907
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| linux linux_kernel | 3.12 ≤ v < 5.10.252, 5.11 ≤ v < 5.15.202, 5.16 ≤ v < 6.1.165, 6.2 ≤ v < 6.6.128, 6.7 ≤ v < 6.12.75, 6.13 ≤ v < 6.18.16, 6.19 ≤ v < 6.19.6 | 5.10.252, 5.15.202, 6.1.165, 6.6.128, 6.12.75, 6.18.16, 6.19.6 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.