Improper Check or Handling of Exceptional Conditions in Linux kernel - CVE-2026-43359
Published: May 9, 2026
Vulnerability identifier: #VU130828
CSH Severity: Low
CVSS v4.0: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear
CVE-ID: CVE-2026-43359
CWE-ID: CWE-703
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vendor: Linux Foundation
Affected software:
Linux kernel
Linux kernel
Detailed vulnerability description
The vulnerability allows a local user to cause a denial of service.
The vulnerability exists due to improper handling of item overflow in set received ioctl when processing repeated received UUID values for subvolumes. A local user can invoke the ioctl with the same received UUID for many subvolumes to cause a denial of service.
The issue can abort a transaction and remount the filesystem in read-only mode. Exploitation requires ownership of the subvolume and does not require administrative privileges.
How to mitigate CVE-2026-43359
Install security update from vendor's repository.
Sources
- https://git.kernel.org/stable/c/2e57b8cac2ba0d38aac76c1ecdfd8b899e3581a5
- https://git.kernel.org/stable/c/41fb97353ff58fa4f31904c343fc8e3df2f7517d
- https://git.kernel.org/stable/c/87f2c46003fce4d739138aab4af1942b1afdadac
- https://git.kernel.org/stable/c/b19c0465e4daad5aa8f60552ea0578cf31a11b1e
- https://git.kernel.org/stable/c/b9914db13ac15aca3b74544c0bb1a2e0dad1f174
- https://git.kernel.org/stable/c/d11aefe654a04fc41996d254748d6a38b6b0a7be