{"id":"SUSE-SU-2026:5111-1","summary":"Security update for cephfs","details":"\nThis update for cephfs fixes the following security issues:\n\n- CVE-2026-68160: ceph: fix pre-auth out-of-bounds read on snaptrace in ceph_handle_caps() (bsc#1275472).\n- CVE-2026-43273: ceph: supply snapshot context in ceph_zero_partial_object() (bsc#1264446).\n- CVE-2026-52961: ceph: fix BUG_ON in __ceph_build_xattrs_blob() due to stale blob size (bsc#1269129).\n- CVE-2026-46052: ceph: only d_add() negative dentries when they are unhashed (bsc#1267494).\n- CVE-2026-52962: ceph: fix a buffer leak in __ceph_setxattr() (bsc#1269135).\n- CVE-2026-43420: ceph: fix i_nlink underrun during async unlink (bsc#1264814).\n- CVE-2026-43419: ceph: fix memory leaks in ceph_mdsc_build_path() (bsc#1264661).\n- CVE-2026-23201: ceph: fix oops due to invalid pointer for kfree() in parse_longname() (bsc#1258337).\n- CVE-2025-68297: ceph: fix crash in process_v2_sparse_read() for encrypted directories (bsc#1255403).\n- CVE-2025-38660: ceph: parse_longname(): strrchr() expects NUL-terminated string (bsc#1248634).\n\n- ceph: validate snapdirname option length when mounting (git-fixes).\n- ceph: fix possible integer overflow in ceph_zero_objects() (git-fixes).\n","modified":"2026-11-05T19:00:04.184984561Z","published":"2026-11-05T08:10:03Z","related":["CVE-2025-38660","CVE-2025-68297","CVE-2026-23201","CVE-2026-43273","CVE-2026-43419","CVE-2026-43420","CVE-2026-46052","CVE-2026-52961","CVE-2026-52962","CVE-2026-68160"],"upstream":["CVE-2025-38660","CVE-2025-68297","CVE-2026-23201","CVE-2026-43273","CVE-2026-43419","CVE-2026-43420","CVE-2026-46052","CVE-2026-52961","CVE-2026-52962","CVE-2026-68160"],"references":[{"type":"ADVISORY","url":"https://www.suse.com/support/update/announcement/2026/suse-su-20265111-1/"},{"type":"REPORT","url":"https://bugzilla.suse.com/1248634"},{"type":"REPORT","url":"https://bugzilla.suse.com/1255403"},{"type":"REPORT","url":"https://bugzilla.suse.com/1258337"},{"type":"REPORT","url":"https://bugzilla.suse.com/1264446"},{"type":"REPORT","url":"https://bugzilla.suse.com/1264661"},{"type":"REPORT","url":"https://bugzilla.suse.com/1264814"},{"type":"REPORT","url":"https://bugzilla.suse.com/1267494"},{"type":"REPORT","url":"https://bugzilla.suse.com/1269129"},{"type":"REPORT","url":"https://bugzilla.suse.com/1269135"},{"type":"REPORT","url":"https://bugzilla.suse.com/1275472"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2025-38660"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2025-68297"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-23201"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-43273"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-43419"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-43420"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-46052"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-52961"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-52962"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-68160"}],"affected":[{"package":{"name":"cephfs","ecosystem":"SUSE:Linux Enterprise Module for Legacy 15 SP7","purl":"pkg:rpm/suse/cephfs&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Legacy%2015%20SP7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0-150700.15.7.1"}]}],"ecosystem_specific":{"binaries":[{"cephfs-kmp-64kb":"1.0_k6.4.0_150700.53.84-150700.15.7.1","cephfs-kmp-default":"1.0_k6.4.0_150700.53.84-150700.15.7.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:5111-1.json"}}],"schema_version":"1.9.2"}