PT-2026-6113 · Linux+1 · Linux Kernel+1

Published 2026-01-01 · Updated 2026-02-04 · CVE-2026-23043

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A NULL pointer dereference issue exists in the do abort log replay() function within the Btrfs log replay component of the Linux kernel. The issue, identified by Coverity (CID 1666756), occurs when btrfs alloc path() fails during buffer replay, resulting in a NULL value for wc->subvol path. Subsequently, btrfs abort log replay() unconditionally dereferences this NULL pointer when attempting to print debug information. The fix involves adding a NULL check before dereferencing wc->subvol path within do abort log replay().

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2026-23043

Affected Products

Btrfs

Linux Kernel

References · 14

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/23xxx/CVE-2026-23043.json · Exploit
• https://ubuntu.com/security/CVE-2026-23043 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2026-23043 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-23043 · Security Note
• https://cve.org/CVERecord?id=CVE-2026-23043 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-23043 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-23043 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2026-23043 · Vendor Advisory
• https://t.me/CVEtracker/43734 · Telegram Post
• https://git.kernel.org/stable/c/6d1b61b8e1e44888c643d89225ab819b10649b2e · Note
• https://twitter.com/VulmonFeeds/status/2019114027784237516 · Twitter Post
• https://git.kernel.org/stable/c/530e3d4af566ca44807d79359b90794dea24c4f3 · Note
• https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git · Note
• https://git.kernel.org/linus/530e3d4af566ca44807d79359b90794dea24c4f3 · Note