CVE-2026-43117

CRITICAL

btrfs: tracepoints: get correct superblock from dentry in event btrfs_sync_file()

Title source: cna
STIX 2.1

Description

In the Linux kernel, the following vulnerability has been resolved: btrfs: tracepoints: get correct superblock from dentry in event btrfs_sync_file() If overlay is used on top of btrfs, dentry->d_sb translates to overlay's super block and fsid assignment will lead to a crash. Use file_inode(file)->i_sb to always get btrfs_sb.

References (5)

Core 5

Scores

CVSS v3 9.1
EPSS 0.0006
EPSS Percentile 18.8%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

Details

Status published
Products (19)
Linux/Linux < 4.8
Linux/Linux 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 - 2e4adfaec97ee053ad1bdfb5036845e66f7e0d8a
Linux/Linux 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 - 32372781d664a9b03c40343e96c29d0a6139f97d
Linux/Linux 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 - a85b46db143fda5869e7d8df8f258ccef5fa1719
Linux/Linux 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 - c09a7446aab5773f38d6abb25fce99b8e1dfbc97
Linux/Linux 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 - d110d7cdb045715c0b45b0dfd974525bb38f653d
Linux/Linux 4.8
Linux/Linux 6.12.83 - 6.12.*
Linux/Linux 6.18.24 - 6.18.*
Linux/Linux 6.19.14 - 6.19.*
... and 9 more
Published May 06, 2026
Tracked Since May 06, 2026