{"id":"CVE-2026-43273","title":"ceph: supply snapshot context in ceph_zero_partial_object()","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\nceph: supply snapshot context in ceph_zero_partial_object()\n\nThe ceph_zero_partial_object function was missing proper snapshot\ncontext for its OSD write operations, whi…","severity":"none","vendor":"Linux","product":"Linux","affected":["Linux >= ad7a60de882aca31afb58721db166f7e77afcd92 < 36673344b41c31fb502dd0d0113cec1aa96f581e","Linux >= ad7a60de882aca31afb58721db166f7e77afcd92 < 5788b742007f53406049bef917833a71ddd43f60","Linux >= ad7a60de882aca31afb58721db166f7e77afcd92 < 757873abfc8ea38592582180aed0f57f0f0cb07a","Linux >= ad7a60de882aca31afb58721db166f7e77afcd92 < 9efa154609cdb658f51c7d76b30a09f7e6485250","Linux >= ad7a60de882aca31afb58721db166f7e77afcd92 < 531a76c5a2e44264cee8a70121e63eb28c1ba728","Linux >= ad7a60de882aca31afb58721db166f7e77afcd92 < 69e59a87bab0ea31ab2a584fc65e12dafacf8953","Linux >= ad7a60de882aca31afb58721db166f7e77afcd92 < 4097e70fc543cca72982854108a32f6ae924e727","Linux >= ad7a60de882aca31afb58721db166f7e77afcd92 < f16bd3fa74a2084ee7e16a8a2be7e7399b970907","Linux 3.12"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-11-06T15:32:59.434530Z"},"published":"2026-05-06","updated":"2026-11-06","sourceUpdated":"2026-11-06T15:42:46.088Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-43273","references":[{"url":"https://git.kernel.org/stable/c/36673344b41c31fb502dd0d0113cec1aa96f581e"},{"url":"https://git.kernel.org/stable/c/5788b742007f53406049bef917833a71ddd43f60"},{"url":"https://git.kernel.org/stable/c/757873abfc8ea38592582180aed0f57f0f0cb07a"},{"url":"https://git.kernel.org/stable/c/9efa154609cdb658f51c7d76b30a09f7e6485250"},{"url":"https://git.kernel.org/stable/c/531a76c5a2e44264cee8a70121e63eb28c1ba728"},{"url":"https://git.kernel.org/stable/c/69e59a87bab0ea31ab2a584fc65e12dafacf8953"},{"url":"https://git.kernel.org/stable/c/4097e70fc543cca72982854108a32f6ae924e727"},{"url":"https://git.kernel.org/stable/c/f16bd3fa74a2084ee7e16a8a2be7e7399b970907"}],"tags":["cve.org"],"epss":0.00117,"epssPercentile":0.01667,"ingestedAt":"2026-11-06T15:54:03.955Z","slug":"CVE-2026-43273","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nceph: supply snapshot context in ceph_zero_partial_object()\n\nThe ceph_zero_partial_object function was missing proper snapshot\ncontext for its OSD write operations, which could lead to data\ninconsistencies in snapshots.\n\nReproducer:\n../src/vstart.sh --new -x --localhost --bluestore\n./bin/ceph auth caps client.fs_a mds 'allow rwps fsname=a' mon 'allow r fsname=a' osd 'allow rw tag cephfs data=a'\nmount -t ceph fs_a@.a=/ /mnt/mycephfs/ -o conf=./ceph.conf\ndd if=/dev/urandom of=/mnt/mycephfs/foo bs=64K count=1\nmkdir /mnt/mycephfs/.snap/snap1\nmd5sum /mnt/mycephfs/.snap/snap1/foo\nfallocate -p -o 0 -l 4096 /mnt/mycephfs/foo\necho 3 > /proc/sys/vm/drop/caches\nmd5sum /mnt/mycephfs/.snap/snap1/foo # get different md5sum!!\n\n## Affected\n\n- `Linux >= ad7a60de882aca31afb58721db166f7e77afcd92 < 36673344b41c31fb502dd0d0113cec1aa96f581e`\n- `Linux >= ad7a60de882aca31afb58721db166f7e77afcd92 < 5788b742007f53406049bef917833a71ddd43f60`\n- `Linux >= ad7a60de882aca31afb58721db166f7e77afcd92 < 757873abfc8ea38592582180aed0f57f0f0cb07a`\n- `Linux >= ad7a60de882aca31afb58721db166f7e77afcd92 < 9efa154609cdb658f51c7d76b30a09f7e6485250`\n- `Linux >= ad7a60de882aca31afb58721db166f7e77afcd92 < 531a76c5a2e44264cee8a70121e63eb28c1ba728`\n- `Linux >= ad7a60de882aca31afb58721db166f7e77afcd92 < 69e59a87bab0ea31ab2a584fc65e12dafacf8953`\n- `Linux >= ad7a60de882aca31afb58721db166f7e77afcd92 < 4097e70fc543cca72982854108a32f6ae924e727`\n- `Linux >= ad7a60de882aca31afb58721db166f7e77afcd92 < f16bd3fa74a2084ee7e16a8a2be7e7399b970907`\n- `Linux 3.12`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}