Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: btrfs: Ensure that pages are unlocked in case of a failure in cowfilerange. There is a hangtask report for zoned btrfs as follows: https://github.com/naota/linux/issues/59 726.328648 INFO: Task rocksdb:high0:11085 blocked for...

CVE-2026-53284 btrfs: only release the dirty pages io tree after successful writes

In the Linux kernel, the following vulnerability has been resolved: btrfs: only release the dirty pages io tree after successful writes WARNING With extra warning on dirty extent buffers at umount aka, the next patch in the series, test case generic/388 can trigger the following warning about dir...

Linux Distros Unpatched Vulnerability : CVE-2026-46129

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: btrfs: fix double free in createspaceinfo error path When kobjectinitandadd fails, the call...

CVE-2026-45934 btrfs: fix EEXIST abort due to non-consecutive gaps in chunk allocation

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix EEXIST abort due to non-consecutive gaps in chunk allocation I have been observing a number of systems aborting at insertdevextents in btrfscreatependingblockgroups. The following is a sample stack trace of such an abo...

Linux Distros Unpatched Vulnerability : CVE-2026-43358

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - btrfs: add missing RCU unlock in error path in tryreleasesubpageextentbuffer Call rcureadlock before exiting the loop in tryreleasesubpageextentbuffer because...

UBUNTU-CVE-2026-43361

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix transaction abort when snapshotting received subvolumes Currently a user can trigger a transaction abort by snapshotting a previously received snapshot a bunch of times until we reach a BTRFSUUIDKEYRECEIVEDSUBVOL item...

Linux Distros Unpatched Vulnerability : CVE-2026-43338

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - btrfs: reserve enough transaction items for qgroup ioctls Currently our qgroup ioctls don't reserve any space, they just do a transaction join, which does not...

Linux Distros Unpatched Vulnerability : CVE-2026-31666

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - btrfs: fix incorrect return value after changing leaf in lookupextentdataref After commit 1618aa3c2e01 btrfs: simplify return variables in lookupextentdataref,...

Linux Distros Unpatched Vulnerability : CVE-2026-31434

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - btrfs: fix leak of kobject name for sub-group spaceinfo When createspaceinfosubgroup allocates elements of spaceinfo-subgroup, kobjectinitandadd is called for...

The vulnerability of the `__cow_file_rangeInline()` function in the fs/btrfs/inode.c module of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the cowfilerangeInline function in the fs/btrfs/inode.c module of the Linux operating system’s kernel is related to the lack of resource release after the expiration of the license period. Exploiting this vulnerability could allow a perpetrator to cause a service failure...

Linux Distros Unpatched Vulnerability : CVE-2025-71269

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - btrfs: do not free data reservation in fallback from inline due to -ENOSPC If we fail to create an inline extent due to -ENOSPC, we will attempt to go through t...

The vulnerability of the btrfs DropExtents() function in the fs/btrfs/file.c file of the file system in Linux kernel allows a attacker to cause a service failure.

The vulnerability of the btrfs DropExtents function in the fs/btrfs/file.c file of the btrfs file system in Linux kernels is related to errors during link counter updates. Exploiting this vulnerability could allow an attacker to cause a service failure...

CVE-2026-23214 btrfs: reject new transactions if the fs is fully read-only

In the Linux kernel, the following vulnerability has been resolved: btrfs: reject new transactions if the fs is fully read-only BUG There is a bug report where a heavily fuzzed fs is mounted with all rescue mount options, which leads to the following warnings during unmount: BTRFS: Transaction...

The vulnerability of the btrfs Drop_extent_map_range() function in the fs/btrfs/extent_map.c file of the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability of the btrfs DropExtentMapRange function in the fs/btrfs/extentmap.c file of the Linux kernel operating system is related to the execution of a loop with an unreachable exit condition an “infinite loop”. Exploiting this vulnerability could allow an attacker to cause a service...

Linux Distros Unpatched Vulnerability : CVE-2026-23018

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - btrfs: release path before initializing extent tree in btrfsreadlockedinode In btrfsreadlockedinode we are calling btrfsinitfileextenttree while holding a path...

Linux Distros Unpatched Vulnerability : CVE-2025-71184

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - btrfs: fix NULL dereference on root when tracing inode eviction When evicting an inode the first thing we do is to setup tracing for it, which implies fetching...

Azure Linux 3.0 Security Update: kernel (CVE-2025-21658)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-21658 advisory. - In the Linux kernel, the following vulnerability has been resolved: btrfs: avoid NULL pointer dereference if...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001358)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001358 advisory. An issue was discovered in the Linux kernel through 4.17.10. There is an invalid pointer dereference in btrfsrootnode when mounting a crafted btrfs image, because of...

ROS-20260114-7312

A vulnerability in the relocateonefolio function of the fs/btrfs/relocation.c module of the Linux kernel btrfs file system support is related to pointer dereferencing. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

CVE-2023-54281

In the Linux kernel, the following vulnerability has been resolved: btrfs: release path before inode lookup during the ino lookup ioctl During the ino lookup ioctl we can end up calling btrfsiget to get an inode reference while we are holding on a root's btree. If btrfsiget needs to lookup the...