btrfs: fix invalid leaf access in btrfs_quota_enable() if ref key not found (Linux Linux)
At a glance
- Source
- NVD
- EPSS
- EPSS 0.13 % · percentile 2 ()
- State
- PUBLISHED
- Published
- Updated
- Assigner
- Linux
- NVD status
- Analyzed
Description
In the Linux kernel, the following vulnerability has been resolved: btrfs: fix invalid leaf access in btrfs_quota_enable() if ref key not found If btrfs_search_slot_for_read() returns 1, it means we did not find any key greater than or equals to the key we asked for, meaning we have reached the end of the tree and therefore the path is not valid. If this happens we need to break out of the loop and stop, instead of continuing and accessing an invalid path.
References
- https://git.kernel.org/stable/c/023545e272f369d487e6a986c1e321c6e04be1da
- https://git.kernel.org/stable/c/fd4913a53e3b54ad7e161847291439fe445d6356
- https://git.kernel.org/stable/c/b5b8ade9da452086e78f5d519b90d3769e354853
- https://git.kernel.org/stable/c/1ee1d006c9fe4d6be5527ab1c84216b80cccbe40
- https://git.kernel.org/stable/c/0761447f6f51e1c7997960d8e6559337deed6729
- https://git.kernel.org/stable/c/d7cf2314dd5e8661c05d076cd627eea9a7f76616
- https://git.kernel.org/stable/c/b2bd557b75b760e4b9d209112bda19314bd64558
- https://git.kernel.org/stable/c/ecb7c2484cfc83a93658907580035a8adf1e0a92
Scores
| Version | Score | Vector | Scored by |
|---|---|---|---|
| CVSS 3.1 | MEDIUM 5.5 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H | NVD · nvd@nist.gov (Primary) |
European references
- ENISA EUVD · EUVD-2026-32258
- GCVE · GCVE-0-2026-45974
CERT-FR advisories
- CERTFR-2026-AVI-1229 — Multiples vulnérabilités dans le noyau Linux d'Ubuntu · cert.ssi.gouv.fr
- CERTFR-2026-AVI-1093 — Multiples vulnérabilités dans le noyau Linux d'Ubuntu · cert.ssi.gouv.fr
- CERTFR-2026-AVI-0985 — Multiples vulnérabilités dans le noyau Linux d'Ubuntu · cert.ssi.gouv.fr
- CERTFR-2026-AVI-0956 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2026-AVI-0954 — Multiples vulnérabilités dans le noyau Linux d'Ubuntu · cert.ssi.gouv.fr
- CERTFR-2026-AVI-0927 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2026-AVI-0926 — Multiples vulnérabilités dans le noyau Linux d'Ubuntu · cert.ssi.gouv.fr
- CERTFR-2026-AVI-0864 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2026-AVI-0861 — Multiples vulnérabilités dans le noyau Linux d'Ubuntu · cert.ssi.gouv.fr
- CERTFR-2026-AVI-0833 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2026-AVI-0831 — Multiples vulnérabilités dans le noyau Linux d'Ubuntu · cert.ssi.gouv.fr
- CERTFR-2026-AVI-0696 — Multiples vulnérabilités dans le noyau Linux de Debian LTS · cert.ssi.gouv.fr
Affected configurations (NVD CPE)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 5.9.7 < 5.10cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 5.10.1 < 5.10.252cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 5.11 < 5.15.202cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 5.16 < 6.1.165cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 6.2 < 6.6.128cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 6.7 < 6.12.75cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 6.13 < 6.18.14cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 6.19 < 6.19.4cpe:2.3:o:linux:linux_kernel:5.10:-:*:*:*:*:*:*cpe:2.3:o:linux:linux_kernel:5.10:rc2:*:*:*:*:*:*cpe:2.3:o:linux:linux_kernel:5.10:rc3:*:*:*:*:*:*cpe:2.3:o:linux:linux_kernel:5.10:rc4:*:*:*:*:*:*cpe:2.3:o:linux:linux_kernel:5.10:rc5:*:*:*:*:*:*cpe:2.3:o:linux:linux_kernel:5.10:rc6:*:*:*:*:*:*cpe:2.3:o:linux:linux_kernel:5.10:rc7:*:*:*:*:*:*
Affected products
| Product | Versions |
|---|---|
| Linux · Linux | affected 5223cc60b40ae525ae6c94e98824129f1a5b4ae5 < 023545e272f369d487e6a986c1e321c6e04be1da ; affected 5223cc60b40ae525ae6c94e98824129f1a5b4ae5 < fd4913a53e3b54ad7e161847291439fe445d6356 ; affected 5223cc60b40ae525ae6c94e98824129f1a5b4ae5 < b5b8ade9da452086e78f5d519b90d3769e354853 ; affected 5223cc60b40ae525ae6c94e98824129f1a5b4ae5 < 1ee1d006c9fe4d6be5527ab1c84216b80cccbe40 ; affected 5223cc60b40ae525ae6c94e98824129f1a5b4ae5 < 0761447f6f51e1c7997960d8e6559337deed6729 ; affected 5223cc60b40ae525ae6c94e98824129f1a5b4ae5 < d7cf2314dd5e8661c05d076cd627eea9a7f76616 |
| Linux · Linux | affected 5.10 ; unaffected 0 < 5.10 ; unaffected 5.10.252 ≤ 5.10.* ; unaffected 5.15.202 ≤ 5.15.* ; unaffected 6.1.165 ≤ 6.1.* ; unaffected 6.6.128 ≤ 6.6.* |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| CERT-FR (ANSSI) | Licence Ouverte / Etalab 2.0 |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |