{"id":"CVE-2022-26253","aliases":["CLSA-2023-1681151394"],"status":"published","title":"Fix CVE(s): CVE-2022-26253","description":"* SECURITY UPDATE: stack-based buffer overread in FUSE xlator\n     - debian/patches/CVE-2022-26253.patch: access the graph-\u003eid\n       only while event is associated specific to FUSE xlator.\n     - CVE-2022-26253","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2023-04-10T18:29:58Z","modified":"2026-06-04T10:03:27Z","fixes":[{"ecosystem":"TuxCare:Ubuntu:16.04","package":"glusterfs-client","fixed_in":["3.7.6-1ubuntu1+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"glusterfs-common","fixed_in":["3.7.6-1ubuntu1+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"glusterfs-server","fixed_in":["3.7.6-1ubuntu1+tuxcare.els1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"glusterfs-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.6-1ubuntu1+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"glusterfs-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.6-1ubuntu1+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"glusterfs-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.6-1ubuntu1+tuxcare.els1"}]}]}],"references":[{"url":"https://errata.cloudlinux.com/ubuntu16_04-els/CLSA-2023-1681151394","tags":["advisory"]}],"sources":{"osv":[{"id":"CLSA-2023-1681151394","title":"Fix CVE(s): CVE-2022-26253","description":"\n   * SECURITY UPDATE: stack-based buffer overread in FUSE xlator\n     - debian/patches/CVE-2022-26253.patch: access the graph-\u003eid\n       only while event is associated specific to FUSE xlator.\n     - CVE-2022-26253","status":"published","published":"2023-04-10T18:29:58Z","modified":"2026-06-04T10:03:27.528121Z","updated_at":"2026-11-02T15:43:40.176048Z"}]}}