PT-2026-39026 · Linux · Linux Kernel

Published 2026-05-08 · Updated 2026-05-15 · CVE-2026-43365

Positive Technologies (AI Summary)

CVSS v3.1

8.2

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the XFS file system where the l iclog roundoff value is set to 512 if the superblock does not list a log stripe unit. On disks with 4k physical sectors, this results in undersized roundoff values, leading to corrupt logs and unmountable filesystems.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2026-43365

Affected Products

Linux Kernel

References · 18

• https://osv.dev/vulnerability/BELL-CVE-2026-43365 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-43365 · Vendor Advisory
• https://git.kernel.org/stable/c/5e7148402dfc4a5b7894d8e97b15e5c2e70924aa · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-43365 · Security Note
• https://git.kernel.org/stable/c/5afae524f83d6a18517298491a5624cb0eae5029 · Patch
• https://git.kernel.org/stable/c/41e91dff2d3974730b5ee50daa8e27ec254cbf91 · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-43365 · Vendor Advisory
• https://git.kernel.org/stable/c/446a1f5bb64ba38adb93cb043ff0f7b85e8937ca · Patch
• https://git.kernel.org/stable/c/e88ce9f0536f3b2149afb70625cfc4bd74a4ac6d · Patch
• https://git.kernel.org/stable/c/2ecda4b83749c1fef0c9dea4fd5e8b513aba3e40 · Patch
• https://cve.org/CVERecord?id=CVE-2026-43365 · Security Note
• https://git.kernel.org/stable/c/52a8a1ba883defbfe3200baa22cf4cd21985d51a · Patch
• https://ubuntu.com/security/CVE-2026-43365 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2026-43365 · Vendor Advisory
• https://twitter.com/hetmehtaa/status/2055151398283837677 · Twitter Post