HOMEVULNERABILITIESCVE-2026-43273
MEDIUM

CVE-2026-43273

Published: May 6, 2026· Updated: May 8, 2026

5.5
CVSS v3.1
EPSS:0.02%probability of exploitation in 30 daysPercentile:7.0th

Official Description

In the Linux kernel, the following vulnerability has been resolved:

ceph: supply snapshot context in ceph_zero_partial_object()

The ceph_zero_partial_object function was missing proper snapshot

context for its OSD write operations, which could lead to data

inconsistencies in snapshots.

Reproducer:

../src/vstart.sh --new -x --localhost --bluestore

./bin/ceph auth caps client.fs_a mds 'allow rwps fsname=a' mon 'allow r fsname=a' osd 'allow rw tag cephfs data=a'

mount -t ceph [email protected]=/ /mnt/mycephfs/ -o conf=./ceph.conf

dd if=/dev/urandom of=/mnt/mycephfs/foo bs=64K count=1

mkdir /mnt/mycephfs/.snap/snap1

md5sum /mnt/mycephfs/.snap/snap1/foo

fallocate -p -o 0 -l 4096 /mnt/mycephfs/foo

echo 3 > /proc/sys/vm/drop/caches

md5sum /mnt/mycephfs/.snap/snap1/foo # get different md5sum!!

NVD Source

Technical Analysis

CVE-2026-43273 requires local access, meaning attackers must already have a foothold on the target system.

Exploitation requires low privileges, which limits the exposure to scenarios where an attacker has already gained initial access.

A successful exploit results in availability disruption (denial of service), with a CVSS base score of 5.5.

CVSS v3.1 Vector Breakdown

Exploitability
Attack VectorLocal
Attack ComplexityLow
Privileges Req.Low
User InteractionNone
ScopeUnchanged
Impact
ConfidentialityNone
IntegrityNone
AvailabilityHigh
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected Vendors & Products

Linux1 product
linux kernel
Source: NVD CPE · 1 total CPE entries

Exploit & PoC Resources

NO KNOWN EXPLOITNo public exploit confirmed at this time
Exploit-DB
Offensive Security exploit database
GitHub PoC Search
Community PoC repositories
Rapid7 / Metasploit
Metasploit module search
PacketStorm
Security advisories & exploits
NVD Detail
Official NIST entry
MITRE CVE
CVE Program entry
External links open in a new tab. Always verify in a controlled environment before use.

Official Patches & Advisories

PATCHhttps://git.kernel.org/stable/c/36673344b41c31fb502dd0d0113cec1aa96f581e
PATCHhttps://git.kernel.org/stable/c/4097e70fc543cca72982854108a32f6ae924e727
PATCHhttps://git.kernel.org/stable/c/531a76c5a2e44264cee8a70121e63eb28c1ba728
PATCHhttps://git.kernel.org/stable/c/5788b742007f53406049bef917833a71ddd43f60
PATCHhttps://git.kernel.org/stable/c/69e59a87bab0ea31ab2a584fc65e12dafacf8953
PATCHhttps://git.kernel.org/stable/c/757873abfc8ea38592582180aed0f57f0f0cb07a
PATCHhttps://git.kernel.org/stable/c/9efa154609cdb658f51c7d76b30a09f7e6485250
PATCHhttps://git.kernel.org/stable/c/f16bd3fa74a2084ee7e16a8a2be7e7399b970907

All References (8)

→
https://git.kernel.org/stable/c/36673344b41c31fb502dd0d0113cec1aa96f581ePatch
→
https://git.kernel.org/stable/c/4097e70fc543cca72982854108a32f6ae924e727Patch
→
https://git.kernel.org/stable/c/531a76c5a2e44264cee8a70121e63eb28c1ba728Patch
→
https://git.kernel.org/stable/c/5788b742007f53406049bef917833a71ddd43f60Patch
→
https://git.kernel.org/stable/c/69e59a87bab0ea31ab2a584fc65e12dafacf8953Patch
→
https://git.kernel.org/stable/c/757873abfc8ea38592582180aed0f57f0f0cb07aPatch
→
https://git.kernel.org/stable/c/9efa154609cdb658f51c7d76b30a09f7e6485250Patch
→
https://git.kernel.org/stable/c/f16bd3fa74a2084ee7e16a8a2be7e7399b970907Patch

Quick Facts

CVE IDCVE-2026-43273
CVSS Score5.5 / 10
SeverityMEDIUM
CISA KEVNo
EPSS (30d)0.02%
Affected1 vendor
PublishedMay 6, 2026

Recommended Actions

  • →Apply vendor patches immediately
  • →Monitor CVE-2026-43273 in threat intel feeds
  • →Review IDS/IPS signatures for exploitation attempts
Data sourced from NVD (NIST), CISA KEV, and EPSS (FIRST). Analysis generated by CTIWATCH.COM. CVE data is provided under the NVD usage policy.
← All Vulnerabilities·Search for CVE-2026-43273·NVD