SUSE-SU-2026:5111-1

See a problem?
Please try reporting it to the source first.
Source
https://www.suse.com/support/update/announcement/2026/suse-su-20265111-1/
Import Source
https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:5111-1.json
JSON Data
https://api.osv.dev/v1/vulns/SUSE-SU-2026:5111-1
Upstream
CVE (10)
Related
CVE (10)
Published
2026-11-05T08:10:03Z
Modified
2026-11-05T19:00:04Z
Summary
Security update for cephfs
Details

This update for cephfs fixes the following security issues:

  • CVE-2026-68160: ceph: fix pre-auth out-of-bounds read on snaptrace in ceph_handle_caps() (bsc#1275472).

  • CVE-2026-43273: ceph: supply snapshot context in ceph_zero_partial_object() (bsc#1264446).

  • CVE-2026-52961: ceph: fix BUG_ON in __ceph_build_xattrs_blob() due to stale blob size (bsc#1269129).

  • CVE-2026-46052: ceph: only d_add() negative dentries when they are unhashed (bsc#1267494).

  • CVE-2026-52962: ceph: fix a buffer leak in __ceph_setxattr() (bsc#1269135).

  • CVE-2026-43420: ceph: fix i_nlink underrun during async unlink (bsc#1264814).

  • CVE-2026-43419: ceph: fix memory leaks in ceph_mdsc_build_path() (bsc#1264661).

  • CVE-2026-23201: ceph: fix oops due to invalid pointer for kfree() in parse_longname() (bsc#1258337).

  • CVE-2025-68297: ceph: fix crash in process_v2_sparse_read() for encrypted directories (bsc#1255403).

  • CVE-2025-38660: ceph: parse_longname(): strrchr() expects NUL-terminated string (bsc#1248634).

  • ceph: validate snapdirname option length when mounting (git-fixes).

  • ceph: fix possible integer overflow in ceph_zero_objects() (git-fixes).

References

Affected packages

SUSE:Linux Enterprise Module for Legacy 15 SP7 / cephfs

Package

Name
cephfs
Purl
pkg:rpm/suse/cephfs&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Legacy%2015%20SP7

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.0-150700.15.7.1

Ecosystem specific 

{
    "binaries": [
        {
            "cephfs-kmp-64kb": "1.0_k6.4.0_150700.53.84-150700.15.7.1",
            "cephfs-kmp-default": "1.0_k6.4.0_150700.53.84-150700.15.7.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:5111-1.json"