CVE-2026-23043

Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
04/02/2026
Last modified:
04/02/2026

Description

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> btrfs: fix NULL pointer dereference in do_abort_log_replay()<br /> <br /> Coverity reported a NULL pointer dereference issue (CID 1666756) in<br /> do_abort_log_replay(). When btrfs_alloc_path() fails in<br /> replay_one_buffer(), wc-&gt;subvol_path is NULL, but btrfs_abort_log_replay()<br /> calls do_abort_log_replay() which unconditionally dereferences<br /> wc-&gt;subvol_path when attempting to print debug information. Fix this by<br /> adding a NULL check before dereferencing wc-&gt;subvol_path in<br /> do_abort_log_replay().

Impact