Data Inconsistency Vulnerability in Ceph Storage by Linux Kernel

CVE-2026-43273

What is CVE-2026-43273?

A vulnerability in the Linux kernel's Ceph storage system was identified in the ceph_zero_partial_object function. This function fails to provide the necessary snapshot context during OSD write operations, which could potentially lead to discrepancies in data stored in snapshots. If a user performs certain operations when interacting with the Ceph file system, they may encounter inconsistent data in snapshots, leading to inaccurate results when retrieving or validating stored information.

References