CVE-2022-26253
Fix CVE(s): CVE-2022-26253
No scoreFix available
- SECURITY UPDATE: stack-based buffer overread in FUSE xlator
- debian/patches/CVE-2022-26253.patch: access the graph->id only while event is associated specific to FUSE xlator.
- CVE-2022-26253
What each source reports
OSVCLSA-2023-1681151394 No score
Fix CVE(s): CVE-2022-26253
- SECURITY UPDATE: stack-based buffer overread in FUSE xlator
- debian/patches/CVE-2022-26253.patch: access the graph->id only while event is associated specific to FUSE xlator.
- CVE-2022-26253
- Record
CLSA-2023-1681151394- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
glusterfs-clientTuxCare:Ubuntu:16.04 |
before 3.7.6-1ubuntu1+tuxcare.els1 | 3.7.6-1ubuntu1+tuxcare.els1 |
glusterfs-commonTuxCare:Ubuntu:16.04 |
before 3.7.6-1ubuntu1+tuxcare.els1 | 3.7.6-1ubuntu1+tuxcare.els1 |
glusterfs-serverTuxCare:Ubuntu:16.04 |
before 3.7.6-1ubuntu1+tuxcare.els1 | 3.7.6-1ubuntu1+tuxcare.els1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2022-26253 is a vulnerability with no CVSS score yet in glusterfs-client, published April 10, 2023. No source lists public exploit code. Fixed in glusterfs-client 3.7.6-1ubuntu1+tuxcare.els1.