SB2026050985 - Improper Check or Handling of Exceptional Conditions in Linux kernel btrfs

Description

This security bulletin contains information about 1 vulnerability.

1) Improper Check or Handling of Exceptional Conditions (CVE-ID: CVE-2026-43299)

CWE-ID: CWE-703 - Improper Check or Handling of Exceptional Conditions

CVSSv4: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear

The vulnerability allows a local user to cause a denial of service.

The vulnerability exists due to improper handling of a read-only filesystem state in btrfs_repair_io_failure() when processing read-repair operations after the filesystem flips to read-only following a critical error. A local user can trigger the error condition to cause a denial of service.

The issue is triggered when a read repair is pending while the filesystem becomes read-only due to a critical error such as ENOSPC in a critical path.

Remediation

Install update from vendor's website.

References

• https://git.kernel.org/stable/c/8ceaad6cd6e7fa5f73b0b2796a2e85d75d37e9f3
• https://git.kernel.org/stable/c/f6df18c001e3dcebc08482d0adeacd0cfea08593