CVE-2026-43273
ceph: supply snapshot context in ceph_zero_partial_object()
Description
In the Linux kernel, the following vulnerability has been resolved: ceph: supply snapshot context in ceph_zero_partial_object() The ceph_zero_partial_object function was missing proper snapshot context for its OSD write operations, which could lead to data inconsistencies in snapshots. Reproducer: ../src/vstart.sh --new -x --localhost --bluestore ./bin/ceph auth caps client.fs_a mds 'allow rwps fsname=a' mon 'allow r fsname=a' osd 'allow rw tag cephfs data=a' mount -t ceph [email protected]=/ /mnt/mycephfs/ -o conf=./ceph.conf dd if=/dev/urandom of=/mnt/mycephfs/foo bs=64K count=1 mkdir /mnt/mycephfs/.snap/snap1 md5sum /mnt/mycephfs/.snap/snap1/foo fallocate -p -o 0 -l 4096 /mnt/mycephfs/foo echo 3 > /proc/sys/vm/drop/caches md5sum /mnt/mycephfs/.snap/snap1/foo # get different md5sum!!
INFO
Published Date :
May 6, 2026, 12:16 p.m.
Last Modified :
May 8, 2026, 8:01 p.m.
Remotely Exploit :
No
Source :
416baaa9-dc9f-4396-8d5f-8c081fb06d67
CVSS Scores
| Score | Version | Severity | Vector | Exploitability Score | Impact Score | Source |
|---|---|---|---|---|---|---|
| CVSS 3.1 | MEDIUM | [email protected] |
Solution
- Update the Linux kernel.
- Verify snapshot data integrity after update.
- Apply vendor-specific patches if available.
References to Advisories, Solutions, and Tools
Here, you will find a curated list of external links that provide in-depth
information, practical solutions, and valuable tools related to
CVE-2026-43273.
CWE - Common Weakness Enumeration
While CVE identifies
specific instances of vulnerabilities, CWE categorizes the common flaws or
weaknesses that can lead to vulnerabilities. CVE-2026-43273 is
associated with the following CWEs:
Common Attack Pattern Enumeration and Classification (CAPEC)
Common Attack Pattern Enumeration and Classification
(CAPEC)
stores attack patterns, which are descriptions of the common attributes and
approaches employed by adversaries to exploit the CVE-2026-43273
weaknesses.
We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).
Results are limited to the first 15 repositories due to potential performance issues.
The following list is the news that have been mention
CVE-2026-43273 vulnerability anywhere in the article.
The following table lists the changes that have been made to the
CVE-2026-43273 vulnerability over time.
Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability's severity, exploitability, or other characteristics.
-
Initial Analysis by [email protected]
May. 08, 2026
Action Type Old Value New Value Added CVSS V3.1 AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Added CWE NVD-CWE-noinfo Added CPE Configuration OR *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 6.2 up to (excluding) 6.6.128 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 6.7 up to (excluding) 6.12.75 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 6.13 up to (excluding) 6.18.16 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 6.19 up to (excluding) 6.19.6 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 5.11 up to (excluding) 5.15.202 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 5.16 up to (excluding) 6.1.165 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 3.12 up to (excluding) 5.10.252 Added Reference Type kernel.org: https://git.kernel.org/stable/c/36673344b41c31fb502dd0d0113cec1aa96f581e Types: Patch Added Reference Type kernel.org: https://git.kernel.org/stable/c/4097e70fc543cca72982854108a32f6ae924e727 Types: Patch Added Reference Type kernel.org: https://git.kernel.org/stable/c/531a76c5a2e44264cee8a70121e63eb28c1ba728 Types: Patch Added Reference Type kernel.org: https://git.kernel.org/stable/c/5788b742007f53406049bef917833a71ddd43f60 Types: Patch Added Reference Type kernel.org: https://git.kernel.org/stable/c/69e59a87bab0ea31ab2a584fc65e12dafacf8953 Types: Patch Added Reference Type kernel.org: https://git.kernel.org/stable/c/757873abfc8ea38592582180aed0f57f0f0cb07a Types: Patch Added Reference Type kernel.org: https://git.kernel.org/stable/c/9efa154609cdb658f51c7d76b30a09f7e6485250 Types: Patch Added Reference Type kernel.org: https://git.kernel.org/stable/c/f16bd3fa74a2084ee7e16a8a2be7e7399b970907 Types: Patch -
New CVE Received by 416baaa9-dc9f-4396-8d5f-8c081fb06d67
May. 06, 2026
Action Type Old Value New Value Added Description In the Linux kernel, the following vulnerability has been resolved: ceph: supply snapshot context in ceph_zero_partial_object() The ceph_zero_partial_object function was missing proper snapshot context for its OSD write operations, which could lead to data inconsistencies in snapshots. Reproducer: ../src/vstart.sh --new -x --localhost --bluestore ./bin/ceph auth caps client.fs_a mds 'allow rwps fsname=a' mon 'allow r fsname=a' osd 'allow rw tag cephfs data=a' mount -t ceph [email protected]=/ /mnt/mycephfs/ -o conf=./ceph.conf dd if=/dev/urandom of=/mnt/mycephfs/foo bs=64K count=1 mkdir /mnt/mycephfs/.snap/snap1 md5sum /mnt/mycephfs/.snap/snap1/foo fallocate -p -o 0 -l 4096 /mnt/mycephfs/foo echo 3 > /proc/sys/vm/drop/caches md5sum /mnt/mycephfs/.snap/snap1/foo # get different md5sum!! Added Reference https://git.kernel.org/stable/c/36673344b41c31fb502dd0d0113cec1aa96f581e Added Reference https://git.kernel.org/stable/c/4097e70fc543cca72982854108a32f6ae924e727 Added Reference https://git.kernel.org/stable/c/531a76c5a2e44264cee8a70121e63eb28c1ba728 Added Reference https://git.kernel.org/stable/c/5788b742007f53406049bef917833a71ddd43f60 Added Reference https://git.kernel.org/stable/c/69e59a87bab0ea31ab2a584fc65e12dafacf8953 Added Reference https://git.kernel.org/stable/c/757873abfc8ea38592582180aed0f57f0f0cb07a Added Reference https://git.kernel.org/stable/c/9efa154609cdb658f51c7d76b30a09f7e6485250 Added Reference https://git.kernel.org/stable/c/f16bd3fa74a2084ee7e16a8a2be7e7399b970907