CVE-2026-23043
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
04/02/2026
Last modified:
04/02/2026
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
btrfs: fix NULL pointer dereference in do_abort_log_replay()<br />
<br />
Coverity reported a NULL pointer dereference issue (CID 1666756) in<br />
do_abort_log_replay(). When btrfs_alloc_path() fails in<br />
replay_one_buffer(), wc->subvol_path is NULL, but btrfs_abort_log_replay()<br />
calls do_abort_log_replay() which unconditionally dereferences<br />
wc->subvol_path when attempting to print debug information. Fix this by<br />
adding a NULL check before dereferencing wc->subvol_path in<br />
do_abort_log_replay().



