PT-2026-37428 · Linux · Linux Kernel

Published 2026-05-06 · Updated 2026-05-06 · CVE-2026-43118

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the Btrfs file system where an inode may retain a non-zero size after log replay, even if it was truncated to zero. This occurs because when logging that an inode exists (such as during a rename or hardlink creation), the generation of the logged inode item is set to 0. During log replay, the overwrite item() function interprets a generation of 0 as a signal to preserve the existing i size from the subvolume tree. If an inode was previously logged with an i size of 0 in the same transaction, or if it was created in a past transaction, the replay process fails to update the inode size to 0, potentially leaving the file with its previous size after a power failure.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2026-43118

Affected Products

Linux Kernel

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2026-43118 · Security Note
• https://git.kernel.org/stable/c/fddb157536e67a055597f00a8b4922d5f5ed0826 · Patch
• https://git.kernel.org/stable/c/5254d4181add9dfaa5e3519edd71cc8f752b2f85 · Patch
• https://git.kernel.org/stable/c/03e966b63df5b06790310c1faaf3e0cb43adea8b · Patch
• https://t.me/CVEtracker/52841 · Telegram Post
• https://twitter.com/VulmonFeeds/status/2051987389938106809 · Twitter Post