CVE-2026-43273None▾ SunlitIn the Linux kernel, the following vulnerability has been resolved: ceph: supply snapshot context in ceph_zero_partial_object() The ceph_zero_partial_object function was missing proper snapshot context for its OSD write operations, whi…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 2.8 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake.
Exploit-prediction probability, daily snapshots since Nov 6.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
Last analysed / modified upstream
0.1%
In the Linux kernel, the following vulnerability has been resolved:
ceph: supply snapshot context in ceph_zero_partial_object()
The ceph_zero_partial_object function was missing proper snapshot context for its OSD write operations, which could lead to data inconsistencies in snapshots.
Reproducer: ../src/vstart.sh --new -x --localhost --bluestore ./bin/ceph auth caps client.fs_a mds 'allow rwps fsname=a' mon 'allow r fsname=a' osd 'allow rw tag cephfs data=a' mount -t ceph [email protected]=/ /mnt/mycephfs/ -o conf=./ceph.conf dd if=/dev/urandom of=/mnt/mycephfs/foo bs=64K count=1 mkdir /mnt/mycephfs/.snap/snap1 md5sum /mnt/mycephfs/.snap/snap1/foo fallocate -p -o 0 -l 4096 /mnt/mycephfs/foo echo 3 > /proc/sys/vm/drop/caches md5sum /mnt/mycephfs/.snap/snap1/foo # get different md5sum!!
Linux >= ad7a60de882aca31afb58721db166f7e77afcd92 < 36673344b41c31fb502dd0d0113cec1aa96f581eLinux >= ad7a60de882aca31afb58721db166f7e77afcd92 < 5788b742007f53406049bef917833a71ddd43f60Linux >= ad7a60de882aca31afb58721db166f7e77afcd92 < 757873abfc8ea38592582180aed0f57f0f0cb07aLinux >= ad7a60de882aca31afb58721db166f7e77afcd92 < 9efa154609cdb658f51c7d76b30a09f7e6485250Linux >= ad7a60de882aca31afb58721db166f7e77afcd92 < 531a76c5a2e44264cee8a70121e63eb28c1ba728Linux >= ad7a60de882aca31afb58721db166f7e77afcd92 < 69e59a87bab0ea31ab2a584fc65e12dafacf8953Linux >= ad7a60de882aca31afb58721db166f7e77afcd92 < 4097e70fc543cca72982854108a32f6ae924e727Linux >= ad7a60de882aca31afb58721db166f7e77afcd92 < f16bd3fa74a2084ee7e16a8a2be7e7399b970907Linux 3.12Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-99284Nonenet: skbuff: propagate shared-frag marker in skb_zerocopy()
CVE-2026-99283Nonenetfilter: conntrack: tcp: use UNACK timeout for non-closing RST packets
CVE-2026-99272Nonesmb: client: validate the data area in SMB2_read()
CVE-2026-99271NoneALSA: line6: Clear prev_fbuf on capture buffer release
CVE-2026-99273Noneksmbd: reserve space for the UTF-16 terminator in stream info
CVE-2026-99275Nonesmb: client: reject short SESSION_SETUP responses