CVE-2026-23141
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
14/02/2026
Last modified:
14/02/2026
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
btrfs: send: check for inline extents in range_is_hole_in_parent()<br />
<br />
Before accessing the disk_bytenr field of a file extent item we need<br />
to check if we are dealing with an inline extent.<br />
This is because for inline extents their data starts at the offset of<br />
the disk_bytenr field. So accessing the disk_bytenr<br />
means we are accessing inline data or in case the inline data is less<br />
than 8 bytes we can actually cause an invalid<br />
memory access if this inline extent item is the first item in the leaf<br />
or access metadata from other items.



