PT-2026-37068 · Linux · Linux Kernel

Sashiko · Published 2026-05-05 · Updated 2026-05-07 · CVE-2026-43065

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the ext4 filesystem where pending discard work is not properly handled during remounting. If a filesystem is initially mounted with the discard option and files are deleted, the s discard list is populated and s discard work is queued. If the filesystem is subsequently remounted with the nodiscard option, the EXT4 MOUNT DISCARD flag is cleared, but the pending s discard work is neither cancelled nor flushed. This can lead to a bug when the filesystem is unmounted before the queued work drains automatically. The flaw involves the ext4 mb release() function.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2026-43065

Affected Products

Linux Kernel

References · 17

• https://cve.org/CVERecord?id=CVE-2026-43065 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-43065 · Vendor Advisory
• https://osv.dev/vulnerability/BELL-CVE-2026-43065 · Vendor Advisory
• https://git.kernel.org/stable/c/e96c2354b170aaa53300c8e8fd59e41b133160f7 · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-43065 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-43065 · Security Note
• https://ubuntu.com/security/CVE-2026-43065 · Vendor Advisory
• https://git.kernel.org/stable/c/9b4d9dda6a71ad3425c8109d27c4c6bfb9da97b8 · Patch
• https://git.kernel.org/stable/c/b4737e26d4688b8aea88ad6ea4dbfeb6e78b0327 · Patch
• https://git.kernel.org/stable/c/9ee29d20aab228adfb02ca93f87fb53c56c2f3af · Patch
• https://security-tracker.debian.org/tracker/CVE-2026-43065 · Vendor Advisory
• https://git.kernel.org/stable/c/c360e9d0def4f4ae03254a67c683103908555b75 · Patch
• https://git.kernel.org/stable/c/1c82f863f090ab899085bdfade073313384b514b · Patch
• https://git.kernel.org/stable/c/812b6a7cd3e7f3a3e8a24db85bc6313c26cb1098 · Patch
• https://docs.bell-sw.com/security/cves/CVE-2026-43065 · Note