CVEvulnerability
CVE-2026-23141
5.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2026-02-14
- Last modified
- 2026-10-15
- Assigner
- 416baaa9-dc9f-4396-8d5f-8c081fb06d67
- CVSS 3.1 ([email protected])
- 5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Description
In the Linux kernel, the following vulnerability has been resolved:
btrfs: send: check for inline extents in range_is_hole_in_parent()
Before accessing the disk_bytenr field of a file extent item we need
to check if we are dealing with an inline extent.
This is because for inline extents their data starts at the offset of
the disk_bytenr field. So accessing the disk_bytenr
means we are accessing inline data or in case the inline data is less
than 8 bytes we can actually cause an invalid
memory access if this inline extent item is the first item in the leaf
or access metadata from other items.
Affected configurations
• linux linux kernel (>= 4.11 < 6.6.122)
• linux linux kernel (>= 6.7 < 6.12.67)
• linux linux kernel (>= 6.13 < 6.18.7)
• linux linux kernel 6.19
References
- https://git.kernel.org/stable/c/08b096c1372cd69627f4f559fb47c9fb67a52b39 Patch
- https://git.kernel.org/stable/c/39f83f10772310ba4a77f2b5256aaf36994ef7e8 Patch
- https://git.kernel.org/stable/c/901e581bfc44d181f7d9c3f11880dac3e89deb2e git.kernel.org
- https://git.kernel.org/stable/c/d948055bd46a9c14d1d4217aed65c5c258c32903 git.kernel.org
- https://git.kernel.org/stable/c/db00636643e66898d79f2530ac9c56ebd5eca369 Patch
- https://git.kernel.org/stable/c/f2dc6ab3a14c2d2eb0b14783427eb9b03bf631c9 Patch
- https://cert-portal.siemens.com/productcert/html/ssa-784472.html cert-portal.siemens.com