PT-2026-36470 · Linux · Linux Kernel

Published 2026-05-01 · Updated 2026-05-11 · CVE-2026-43053

Positive Technologies (AI Summary)

CVSS v3.1

4.7

Medium

Base vector

AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the XFS file system during the inactivation of an inode with node-format extended attributes. The function xfs attr3 node inactive() invalidates child leaf or node blocks using xfs trans binval() but does not immediately remove the corresponding entries from parent node blocks. If a log shutdown occurs after these cancellations commit but before the attribute block map (bmap) truncation commits, log recovery may leave stale data on disk. Upon the next mount, xlog recover process iunlinks() may attempt to read the root node via the bmap, leading to a metadata verification failure in xfs da3 node read verify() or when following child pointers to unreplayed blocks, resulting in a metadata corruption shutdown.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Time Of Check To Time Of Use

Weakness Enumeration

CWE-367

Related Identifiers

CVE-2026-43053

Affected Products

Linux Kernel

References · 13

• https://osv.dev/vulnerability/DEBIAN-CVE-2026-43053 · Vendor Advisory
• https://osv.dev/vulnerability/BELL-CVE-2026-43053 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2026-43053 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-43053 · Vendor Advisory
• https://git.kernel.org/stable/c/e5a3e3cdd9b3015ae79456c81beebfdbb5246c0f · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-43053 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2026-43053 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-43053 · Security Note
• https://git.kernel.org/stable/c/b854e1c4eff3473b6d3a9ae74129ac5c48bc0b61 · Patch
• https://twitter.com/windowsforum/status/2053774127484313921 · Twitter Post
• https://docs.bell-sw.com/security/cves/CVE-2026-43053 · Note
• https://t.me/CVEtracker/52424 · Telegram Post
• https://git.kernel.org/linus/b854e1c4eff3473b6d3a9ae74129ac5c48bc0b61 · Note