CVE-2026-43117

CriticalCVSS 9.1/10Last modified Nov 11, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

btrfs: tracepoints: get correct superblock from dentry in event btrfs_sync_file()

If overlay is used on top of btrfs, dentry->d_sb translates to overlay's super block and fsid assignment will lead to a crash.

Use file_inode(file)->i_sb to always get btrfs_sb.

Metrics

CVSS 3.1 9.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

Weakness enumeration

CWE-476

Affected software

VendorProductVersions
LinuxLinux>= bc074524e123ded281cde25ebc5661910f9679e3, < 4a7bab35fad5251c8cb738161152578cd83b6b9c; >= bc074524e123ded281cde25ebc5661910f9679e3, < 520e8b4bcf872a534a7bf61ccf880047642df296; >= bc074524e123ded281cde25ebc5661910f9679e3, < e252db8ca2a01f82d472091f35d549b313278636; >= bc074524e123ded281cde25ebc5661910f9679e3, < c09a7446aab5773f38d6abb25fce99b8e1dfbc97; >= bc074524e123ded281cde25ebc5661910f9679e3, < 32372781d664a9b03c40343e96c29d0a6139f97d; >= bc074524e123ded281cde25ebc5661910f9679e3, < 2e4adfaec97ee053ad1bdfb5036845e66f7e0d8a; >= bc074524e123ded281cde25ebc5661910f9679e3, < d110d7cdb045715c0b45b0dfd974525bb38f653d; >= bc074524e123ded281cde25ebc5661910f9679e3, < a85b46db143fda5869e7d8df8f258ccef5fa1719
LinuxLinux4.8
SiemensSIMATIC S7-1500 TM MFP - GNU/Linux subsystem< *

References

Timeline

Published
May 6, 2026
Last modified
Nov 11, 2026
NVD status
Modified

Related CVEs from 2026

CVE-2026-431185.5In the Linux kernel, the following vulnerability has been resolved: btrfs: fix zero size inode with non-zero size after log replay When loCVE-2026-431195.5In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: annotate data-races around hdev->req_status __hciCVE-2026-43129.8GCB/FCB Audit Software developed by DrangSoft has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to direcCVE-2026-431207.8In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: Fix double free related to rereg_user_mr If IB_MR_REREG_TRCVE-2026-431214.7In the Linux kernel, the following vulnerability has been resolved: io_uring/zcrx: fix user_ref race between scrub and refill paths The ioCVE-2026-431235.5In the Linux kernel, the following vulnerability has been resolved: fbcon: check return value of con2fb_acquire_newinfo() If fbcon_open() CVE-2026-431245.5In the Linux kernel, the following vulnerability has been resolved: pstore: ram_core: fix incorrect success return when vmap() fails In peCVE-2026-431259.8In the Linux kernel, the following vulnerability has been resolved: dlm: validate length in dlm_search_rsb_tree The len parameter in dlm_dCVE-2026-431267.8In the Linux kernel, the following vulnerability has been resolved: ALSA: mixer: oss: Add card disconnect checkpoints ALSA OSS mixer layerCVE-2026-431275.5In the Linux kernel, the following vulnerability has been resolved: ntfs3: fix circular locking dependency in run_unpack_ex Syzbot reporteCVE-2026-431287.8In the Linux kernel, the following vulnerability has been resolved: RDMA/umem: Fix double dma_buf_unpin in failure path In ib_umem_dmabuf_CVE-2026-431295.5In the Linux kernel, the following vulnerability has been resolved: ima: verify the previous kernel's IMA buffer lies in addressable RAM P