CVE-2026-23141: btrfs: send: check for inline extents in range_is_hole_in_parent()
In the Linux kernel, the following vulnerability has been resolved:
btrfs: send: check for inline extents in rangeisholeinparent()
Before accessing the diskbytenr field of a file extent item we need to check if we are dealing with an inline extent. This is because for inline extents their data starts at the offset of the diskbytenr field. So accessing the diskbytenr means we are accessing inline data or in case the inline data is less than 8 bytes we can actually cause an invalid memory access if this inline extent item is the first item in the leaf or access metadata from other items.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2026-23141?
CVE-2026-23141 has a medium severity rating of 5.5 according to the CVSS 3.1 metrics.
What does CVE-2026-23141 affect?
CVE-2026-23141 affects the btrfs file system in the Linux kernel.
How do I fix CVE-2026-23141?
To fix CVE-2026-23141, apply the patch available for the Linux kernel.
What could happen if CVE-2026-23141 is exploited?
If exploited, CVE-2026-23141 could lead to data loss or system instability due to improper handling of inline extents.
When was CVE-2026-23141 published?
CVE-2026-23141 was published on February 14, 2026.