CVE-2026-23141: btrfs: send: check for inline extents in range_is_hole_in_parent()
Published Feb 14, 2026
·Updated
btrfs: send: check for inline extents in rangeisholeinparent()
Affected Software
10 affected componentsFixes available
linux/kernel
Linux Linux kernel>=4.11<6.6.122
Linux Linux kernel>=6.7<6.12.67
Linux Linux kernel>=6.13<6.18.7
Linux Linux kernel=6.19-rc1
Linux Linux kernel=6.19-rc2
Linux Linux kernel=6.19-rc3
Linux Linux kernel=6.19-rc4
Linux Linux kernel=6.19-rc5
debian/linux
6.1.176-16.1.190-16.12.107-16.12.115-27.2.12-17.2.15-1
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.107-1Fixed in 6.12.113-1Fixed in 7.2.12-1Fixed in 7.2.13-1
Event History
Feb 14, 2026
CVE Published
via MITRE·03:36 PM
Data Sourced
via MITRE·03:36 PM
Description
Data Sourced
via NVD·04:15 PM
RemedyDescriptionSeverityAffected Software
Mar 19, 2026
Data Sourced
via Microsoft·08:02 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2026-23141?
CVE-2026-23141 has a medium severity rating of 5.5 according to the CVSS 3.1 metrics.
2
What does CVE-2026-23141 affect?
CVE-2026-23141 affects the btrfs file system in the Linux kernel.
3
How do I fix CVE-2026-23141?
To fix CVE-2026-23141, apply the patch available for the Linux kernel.
4
What could happen if CVE-2026-23141 is exploited?
If exploited, CVE-2026-23141 could lead to data loss or system instability due to improper handling of inline extents.
5
When was CVE-2026-23141 published?
CVE-2026-23141 was published on February 14, 2026.