CVE-2026-43358: btrfs: add missing RCU unlock in error path in try_release_subpage_extent_buffer()
In the Linux kernel, the following vulnerability has been resolved:
btrfs: add missing RCU unlock in error path in tryreleasesubpageextentbuffer()
Call rcureadlock() before exiting the loop in tryreleasesubpageextentbuffer() because there is a rcureadunlock() call past the loop.
This has been detected by the Clang thread-safety analyzer.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.19.10-1 - Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.107-1Fixed in 6.12.116-1Fixed in 7.2.15-1Fixed in 7.3.4-1 - Compensating control
In try_release_subpage_extent_buffer(), call rcu_read_lock() before exiting the loop to balance the rcu_read_unlock() call after the loop.
Event History
Frequently Asked Questions
What is the severity of CVE-2026-43358?
The severity of CVE-2026-43358 has not been explicitly ranked, but it affects the stability of the btrfs filesystem in the Linux kernel.
How do I fix CVE-2026-43358?
To fix CVE-2026-43358, you should update your Linux kernel to a version that includes the patch addressing this vulnerability.
What systems are affected by CVE-2026-43358?
CVE-2026-43358 affects systems running the btrfs filesystem in the Linux kernel.
What are the implications of CVE-2026-43358?
The implications of CVE-2026-43358 include potential data corruption or filesystem instability in affected systems.
When was CVE-2026-43358 reported?
CVE-2026-43358 was reported as a vulnerability in the Linux kernel related to the btrfs filesystem.