CVE-2026-43273

ceph: supply snapshot context in ceph_zero_partial_object()

published May 6, 2026

CVSS
—
EPSS
0%
Percentile
5.1
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

ceph: supply snapshot context in ceph_zero_partial_object()

The ceph_zero_partial_object function was missing proper snapshot

context for its OSD write operations, which could lead to data

inconsistencies in snapshots.

Reproducer:

../src/vstart.sh --new -x --localhost --bluestore

./bin/ceph auth caps client.fs_a mds 'allow rwps fsname=a' mon 'allow r fsname=a' osd 'allow rw tag cephfs data=a'

mount -t ceph [email protected]=/ /mnt/mycephfs/ -o conf=./ceph.conf

dd if=/dev/urandom of=/mnt/mycephfs/foo bs=64K count=1

mkdir /mnt/mycephfs/.snap/snap1

md5sum /mnt/mycephfs/.snap/snap1/foo

fallocate -p -o 0 -l 4096 /mnt/mycephfs/foo

echo 3 > /proc/sys/vm/drop/caches

md5sum /mnt/mycephfs/.snap/snap1/foo # get different md5sum!!

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00162 · 5.1th percentile
Published
2026-05-06T11:28Z
EPSS history
Timeline
  • 06 MAY 11:28Z
    ceph: supply snapshot context in ceph_zero_partial_object()
    cvelistv5