CVE-2026-23423: btrfs: free pages on error in btrfs_uring_read_extent()
In the Linux kernel, the following vulnerability has been resolved:
btrfs: free pages on error in btrfsuringreadextent()
In this function the 'pages' object is never freed in the hopes that it is picked up by btrfsuringreadfinished() whenever that executes in the future. But that's just the happy path. Along the way previous allocations might have gone wrong, or we might not get -EIOCBQUEUED from btrfsencodedreadregularfillpages(). In all these cases, we go to a cleanup section that frees all memory allocated by this function without assuming any deferred execution, and this also needs to happen for the 'pages' allocation.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-23423?
The severity of CVE-2026-23423 is rated as medium with a score of 5.5.
How do I fix CVE-2026-23423?
To fix CVE-2026-23423, update your Linux kernel to the latest patched version that resolves this vulnerability.
What components are affected by CVE-2026-23423?
CVE-2026-23423 affects the btrfs file system in the Linux kernel.
What type of vulnerability is CVE-2026-23423?
CVE-2026-23423 is a memory management vulnerability where pages are not freed on error in the btrfs_uring_read_extent() function.
What impact does CVE-2026-23423 have on system security?
CVE-2026-23423 could lead to potential memory resource exhaustion due to unreleased pages, affecting system stability.