PT-2026-39000 · Linux · Linux Kernel

Syzbot · Published 2026-05-08 · Updated 2026-05-16 · CVE-2026-43349

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the f2fs file system where the f2fs finish read bio() function may access uninitialized data in a folio if the system fails to read data from the device into that folio. This can lead to an uninitialized value access within the f2fs sanity check node footer() function.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Use of Uninitialized Resource

Weakness Enumeration

CWE-908

Related Identifiers

CVE-2026-43349

OPENSUSE-SU-2026:10793-1

Affected Products

Linux Kernel

References · 48

• https://nvd.nist.gov/vuln/detail/CVE-2026-43349 · Security Note
• https://git.kernel.org/stable/c/7b9161a605e91d0987e2596a245dc1f21621b23f · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-43349 · Vendor Advisory
• https://git.kernel.org/stable/c/59970b2586fef4b13e96527b9d232bed30b640cd · Patch
• https://osv.dev/vulnerability/openSUSE-SU-2026:10793-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2026-43349 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-43349 · Vendor Advisory
• https://git.kernel.org/stable/c/a10b89343d41ceee1af0ec38d3a74e526c77fa09 · Patch
• https://ubuntu.com/security/CVE-2026-43349 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2026-43349 · Security Note
• https://suse.com/security/cve/CVE-2026-31698 · Note
• https://suse.com/security/cve/CVE-2026-31700 · Note
• https://suse.com/security/cve/CVE-2026-43058 · Note
• https://suse.com/security/cve/CVE-2026-43350 · Note
• https://suse.com/security/cve/CVE-2026-31701 · Note