PT-2026-70956

CVE-2026-68442

·

Published

2026-08-12

·

Updated

2026-11-06

Description by

CVSS 3.1
7.8
High
MetricsAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description An issue exists in the btrfs component where the btrfs drop extent map range() function incorrectly propagates the EXTENT FLAG LOGGING flag to split extent maps. This occurs because the clearing of the flag was modified to operate on em->flags instead of a local flags copy. Consequently, when a split extent map is freed while remaining on the inode's modified extents list, it triggers a warning in the btrfs free extent map() function, leading to a use-after-free condition. A use-after-free is a memory corruption issue that occurs when an application continues to use a pointer after it has been freed.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Impacts
Vendors
Affected products
Weakness enumeration
Related identifiers
OPENSUSE-SU-2026:21910-1
SUSE-SU-2026:23881-1
SUSE-SU-2026:23887-1
SUSE-SU-2026:23897-1
SUSE-SU-2026:23902-1
USN-8886-1
USN-8887-1
USN-8887-2
USN-8887-3
USN-8888-1
USN-8888-2
USN-8889-1
USN-8917-1
USN-8918-1
USN-9003-1
Found an issue in the description? Have something to add? Feel free to write us 👾