CVE-2026-23423: Linux

Описание

Оригинално описание

In the Linux kernel, the following vulnerability has been resolved: btrfs: free pages on error in btrfs_uring_read_extent() In this function the 'pages' object is never freed in the hopes that it is picked up by btrfs_uring_read_finished() whenever that executes in the future. But that's just the happy path. Along the way previous allocations might have gone wrong, or we might not get -EIOCBQUEUED from btrfs_encoded_read_regular_fill_pages(). In all these cases, we go to a cleanup section that frees all memory allocated by this function without assuming any deferred execution, and this also needs to happen for the 'pages' allocation.

Засегнати продукти

• Linux Linux: 34310c442e175f286b4c06ab5caa4e0b267ea31c преди d4f210de01eaccac61eee657f676045ef9771d07; 34310c442e175f286b4c06ab5caa4e0b267ea31c преди 628895890b0c9ac9129129e89455da7db95ba343; 34310c442e175f286b4c06ab5caa4e0b267ea31c преди 3f501412f2079ca14bf68a18d80a2b7a823f1f64
• Linux Linux: 6.13; преди 6.13; 6.18.17 до 6.18.*; 6.19.7 до 6.19.*; 7.0 до *

История

Други уязвимости в Linux Linux

• 8.1CVE-2026-99270
• 7.8CVE-2026-99269
• CVE-2026-99268
• CVE-2026-99266
• CVE-2026-99267

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2026-23423
• https://nvd.nist.gov/vuln/detail/CVE-2026-23423
• https://git.kernel.org/stable/c/d4f210de01eaccac61eee657f676045ef9771d07
• https://git.kernel.org/stable/c/628895890b0c9ac9129129e89455da7db95ba343
• https://git.kernel.org/stable/c/3f501412f2079ca14bf68a18d80a2b7a823f1f64