Go to homepageCyberStrike

Menu

Star on GitHub · 3.2k
Sign inDownload

CVE-2026-43420

4.7 · MEDIUM

In the Linux kernel, the following vulnerability has been resolved: ceph: fix i_nlink underrun during async unlink During async unlink, we drop the `i_nlink` counter before we receive the complet…

Published May 8, 2026CWE-367EPSS 0.11%

Overview

CVE-2026-43420 is a medium-severity vulnerability. It was published on May 8, 2026 and has a CVSS 3.1 base score of 4.7 (MEDIUM).

This vulnerability has a CVSS 3.1 base score of 4.7, rated MEDIUM. It requires local or adjacent network access to exploit. Some level of privileges is required for exploitation.

Technical description

In the Linux kernel, the following vulnerability has been resolved:

ceph: fix i_nlink underrun during async unlink

During async unlink, we drop the `i_nlink` counter before we receive

the completion (that will eventually update the `i_nlink`) because "we

assume that the unlink will succeed". That is not a bad idea, but it

races against deletions by other clients (or against the completion of

our own unlink) and can lead to an underrun which emits a WARNING like

this one:

WARNING: CPU: 85 PID: 25093 at fs/inode.c:407 drop_nlink+0x50/0x68

Modules linked in:

CPU: 85 UID: 3221252029 PID: 25093 Comm: php-cgi8.1 Not tainted 6.14.11-cm4all1-ampere #655

Hardware name: Supermicro ARS-110M-NR/R12SPD-A, BIOS 1.1b 10/17/2023

pstate: 60400009 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)

pc : drop_nlink+0x50/0x68

lr : ceph_unlink+0x6c4/0x720

sp : ffff80012173bc90

x29: ffff80012173bc90 x28: ffff086d0a45aaf8 x27: ffff0871d0eb5680

x26: ffff087f2a64a718 x25: 0000020000000180 x24: 0000000

Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

References

Refgit.kernel.org/stable/c/6d5fd8bb574bef039eb3b738e523870433a2aeb9Refgit.kernel.org/stable/c/7db008e85a5d17b64bc5390b828bf457ae91a415Refgit.kernel.org/stable/c/8975b85b0d45ca811ace6fac5907652f2310e5acRefgit.kernel.org/stable/c/9b31e88ac5623d15c8bc46f69dfe1d3b43a8f67cRefgit.kernel.org/stable/c/aedd29386b23f3e1e6818943e11abfff2953732fRefgit.kernel.org/stable/c/b3f5513141ecc6b277a8f7b7efe58a0cf9a5e859Refgit.kernel.org/stable/c/ce0123cbb4a40a2f1bbb815f292b26e96088639fRefgit.kernel.org/stable/c/fcc477a6e8856c8a42b3c9e171724d8d6dfadd06

How CyberStrike helps

Frequently asked questions

What is CVE-2026-43420?

CVE-2026-43420 is a medium-severity vulnerability. It was published on May 8, 2026 and has a CVSS 3.1 base score of 4.7 (MEDIUM).

How severe is CVE-2026-43420?

This vulnerability has a CVSS 3.1 base score of 4.7, rated MEDIUM. It requires local or adjacent network access to exploit. Some level of privileges is required for exploitation.

How do I fix or remediate CVE-2026-43420?

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

How can CyberStrike help with CVE-2026-43420?

CyberStrike is an open-source, AI-augmented pentesting engine. Rather than flag a version number, it tests whether an issue like CVE-2026-43420 is actually reachable in your own applications and APIs, then verifies each finding before reporting it. That tells you if the weakness is a real, exploitable risk in your environment or a false positive you can safely deprioritize.

Related MEDIUM CVEs from 2026

View all
Browse by year2026202520242023202220212020201920182017201620152014201320122011201020092008200720062005200420032002200120001999