SUSE-SU-2026:5111-1: Security update for cephfs
This update for cephfs fixes the following security issues:
- CVE-2026-68160: ceph: fix pre-auth out-of-bounds read on snaptrace in cephhandlecaps() (bsc#1275472). - CVE-2026-43273: ceph: supply snapshot context in cephzeropartialobject() (bsc#1264446). - CVE-2026-52961: ceph: fix BUGON in cephbuildxattrsblob() due to stale blob size (bsc#1269129). - CVE-2026-46052: ceph: only dadd() negative dentries when they are unhashed (bsc#1267494). - CVE-2026-52962: ceph: fix a buffer leak in cephsetxattr() (bsc#1269135). - CVE-2026-43420: ceph: fix inlink underrun during async unlink (bsc#1264814). - CVE-2026-43419: ceph: fix memory leaks in cephmdscbuildpath() (bsc#1264661). - CVE-2026-23201: ceph: fix oops due to invalid pointer for kfree() in parselongname() (bsc#1258337). - CVE-2025-68297: ceph: fix crash in processv2sparseread() for encrypted directories (bsc#1255403). - CVE-2025-38660: ceph: parselongname(): strrchr() expects NUL-terminated string (bsc#1248634).
- ceph: validate snapdirname option length when mounting (git-fixes). - ceph: fix possible integer overflow in cephzeroobjects() (git-fixes).
Other sources
This update for cephfs fixes the following security issues: CVE-2026-68160: ceph: fix pre-auth out-of-bounds read on snaptrace in cephhandlecaps() (bsc#1275472). CVE-2026-43273: ceph: supply snapshot context in cephzeropartialobject() (bsc#1264446). CVE-2026-52961: ceph: fix BUGON in cephbuildxattrsblob() due to stale blob size (bsc#1269129). CVE-2026-46052: ceph: only dadd() negative dentries when they are unhashed (bsc#1267494). CVE-2026-52962: ceph: fix a buffer leak in cephsetxattr() (bsc#1269135). CVE-2026-43420: ceph: fix inlink underrun during async unlink (bsc#1264814). CVE-2026-43419: ceph: fix memory leaks in cephmdscbuildpath() (bsc#1264661). CVE-2026-23201: ceph: fix oops due to invalid pointer for kfree() in parselongname() (bsc#1258337). CVE-2025-68297: ceph: fix crash in processv2sparseread() for encrypted directories (bsc#1255403).
CVE-2025-38660: ceph: parselongname(): strrchr() expects NUL-terminated string (bsc#1248634).
ceph: validate snapdirname option length when mounting (git-fixes).
ceph: fix possible integer overflow in cephzeroobjects() (git-fixes).
— SUSE
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
suse/cephfsto a version that resolves this vulnerability.Fixed in 1.0-150700.15.7.1 - Upgrade
Upgrade
suse/cephfs-kmp-default-debuginfoto a version that resolves this vulnerability.Fixed in 1.0_k6.4.0_150700.53.84-150700.15.7.1 - Upgrade
Upgrade
suse/cephfs-kmp-defaultto a version that resolves this vulnerability.Fixed in 1.0_k6.4.0_150700.53.84-150700.15.7.1 - Upgrade
Upgrade
suse/cephfs-debugsourceto a version that resolves this vulnerability.Fixed in 1.0-150700.15.7.1 - Upgrade
Upgrade
suse/cephfs-kmpto a version that resolves this vulnerability.Fixed in 64kb-1.0_k6.4.0_150700.53.84-150700.15.7.1 - Upgrade
Upgrade
suse/cephfs-kmpto a version that resolves this vulnerability.Fixed in 64kb-debuginfo-1.0_k6.4.0_150700.53.84-150700.15.7.1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Module-Legacy-15-SP7-2026-5111
Event History
Child vulnerabilities
Contains the following vulnerabilities.