CVE-2026-23043
published 2026-02-04CVE-2026-23043: In the Linux kernel, the following vulnerability has been resolved: btrfs: fix NULL pointer dereference in do_abort_log_replay() Coverity reported a NULL…
PriorityP418low5.5
EPSS
0.14%
4.2th percentile
In the Linux kernel, the following vulnerability has been resolved:
btrfs: fix NULL pointer dereference in do_abort_log_replay()
Coverity reported a NULL pointer dereference issue (CID 1666756) in
do_abort_log_replay(). When btrfs_alloc_path() fails in
replay_one_buffer(), wc->subvol_path is NULL, but btrfs_abort_log_replay()
calls do_abort_log_replay() which unconditionally dereferences
wc->subvol_path when attempting to print debug information. Fix this by
adding a NULL check before dereferencing wc->subvol_path in
do_abort_log_replay().
Affected
6 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 6.18.8-1 (forky) | linux 6.18.8-1 (forky) |
| linux | linux | — | — |
| linux | linux | >= 2753e49176240f21e4bb10e03514f99e732704bb < 6d1b61b8e1e44888c643d89225ab819b10649b2e | 6d1b61b8e1e44888c643d89225ab819b10649b2e |
| linux | linux | >= 2753e49176240f21e4bb10e03514f99e732704bb < 530e3d4af566ca44807d79359b90794dea24c4f3 | 530e3d4af566ca44807d79359b90794dea24c4f3 |
| linux | linux_kernel | >= 0 < 6.18.8-1 | 6.18.8-1 |
| linux | linux_kernel | >= 6.18.0 < 6.18.6 | 6.18.6 |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
Linux Kernel up to 6.18.5/6.19-rc4 btrfs do_abort_log_replay null pointer dereference (Nessus ID 297885 / WID-SEC-2026-0324)
vuldb·2026-04-30
CVE-2026-23043 [CRITICAL] Linux Kernel up to 6.18.5/6.19-rc4 btrfs do_abort_log_replay null pointer dereference (Nessus ID 297885 / WID-SEC-2026-0324)
A vulnerability labeled as critical has been found in Linux Kernel up to 6.18.5/6.19-rc4. Affected by this issue is the function do_abort_log_replay of the component btrfs. Such manipulation leads to null pointer dereference.
This vulnerability is uniquely identified as CVE-2026-23043. The attack can only be initiated within the local network. No exploit exists.
The affected component should be upgraded.
GHSA
GHSA-79jf-89ph-wp26: In the Linux kernel, the following vulnerability has been resolved:
btrfs: fix NULL pointer dereference in do_abort_log_replay()
Coverity reported a
ghsa_unreviewed·2026-02-04
CVE-2026-23043 GHSA-79jf-89ph-wp26: In the Linux kernel, the following vulnerability has been resolved:
btrfs: fix NULL pointer dereference in do_abort_log_replay()
Coverity reported a
In the Linux kernel, the following vulnerability has been resolved:
btrfs: fix NULL pointer dereference in do_abort_log_replay()
Coverity reported a NULL pointer dereference issue (CID 1666756) in
do_abort_log_replay(). When btrfs_alloc_path() fails in
replay_one_buffer(), wc->subvol_path is NULL, but btrfs_abort_log_replay()
calls do_abort_log_replay() which unconditionally dereferences
wc->subvol_path when attempting to print debug information. Fix this by
adding a NULL check before dereferencing wc->subvol_path in
do_abort_log_replay().
OSV
btrfs: fix NULL pointer dereference in do_abort_log_replay()
osv·2026-02-04
CVE-2026-23043 btrfs: fix NULL pointer dereference in do_abort_log_replay()
btrfs: fix NULL pointer dereference in do_abort_log_replay()
In the Linux kernel, the following vulnerability has been resolved:
btrfs: fix NULL pointer dereference in do_abort_log_replay()
Coverity reported a NULL pointer dereference issue (CID 1666756) in
do_abort_log_replay(). When btrfs_alloc_path() fails in
replay_one_buffer(), wc->subvol_path is NULL, but btrfs_abort_log_replay()
calls do_abort_log_replay() which unconditionally dereferences
wc->subvol_path when attempting to print debug information. Fix this by
adding a NULL check before dereferencing wc->subvol_path in
do_abort_log_replay().
OSV
CVE-2026-23043: In the Linux kernel, the following vulnerability has been resolved: btrfs: fix NULL pointer dereference in do_abort_log_replay() Coverity reported a N
osv·2026-02-04
CVE-2026-23043 CVE-2026-23043: In the Linux kernel, the following vulnerability has been resolved: btrfs: fix NULL pointer dereference in do_abort_log_replay() Coverity reported a N
In the Linux kernel, the following vulnerability has been resolved: btrfs: fix NULL pointer dereference in do_abort_log_replay() Coverity reported a NULL pointer dereference issue (CID 1666756) in do_abort_log_replay(). When btrfs_alloc_path() fails in replay_one_buffer(), wc->subvol_path is NULL, but btrfs_abort_log_replay() calls do_abort_log_replay() which unconditionally dereferences wc->subvol_path when attempting to print debug information. Fix this by adding a NULL check before dereferencing wc->subvol_path in do_abort_log_replay().
Red Hat
kernel: btrfs: fix NULL pointer dereference in do_abort_log_replay()
vendor_redhat·2026-02-04·CVSS 5.5
CVE-2026-23043 [LOW] CWE-476 kernel: btrfs: fix NULL pointer dereference in do_abort_log_replay()
kernel: btrfs: fix NULL pointer dereference in do_abort_log_replay()
In the Linux kernel, the following vulnerability has been resolved:
btrfs: fix NULL pointer dereference in do_abort_log_replay()
Coverity reported a NULL pointer dereference issue (CID 1666756) in
do_abort_log_replay(). When btrfs_alloc_path() fails in
replay_one_buffer(), wc->subvol_path is NULL, but btrfs_abort_log_replay()
calls do_abort_log_replay() which unconditionally dereferences
wc->subvol_path when attempting to print debug information. Fix this by
adding a NULL check before dereferencing wc->subvol_path in
do_abort_log_replay().
A NULL pointer dereference vulnerability was found in the Linux kernel's Btrfs filesystem log replay code. When btrfs_alloc_path() fails in replay_one_buffer() due to memory allocatio
Debian
CVE-2026-23043: linux - In the Linux kernel, the following vulnerability has been resolved: btrfs: fix ...
vendor_debian·2026
CVE-2026-23043 [LOW] CVE-2026-23043: linux - In the Linux kernel, the following vulnerability has been resolved: btrfs: fix ...
In the Linux kernel, the following vulnerability has been resolved: btrfs: fix NULL pointer dereference in do_abort_log_replay() Coverity reported a NULL pointer dereference issue (CID 1666756) in do_abort_log_replay(). When btrfs_alloc_path() fails in replay_one_buffer(), wc->subvol_path is NULL, but btrfs_abort_log_replay() calls do_abort_log_replay() which unconditionally dereferences wc->subvol_path when attempting to print debug information. Fix this by adding a NULL check before dereferencing wc->subvol_path in do_abort_log_replay().
Scope: local
bookworm: resolved
bullseye: resolved
forky: resolved (fixed in 6.18.8-1)
sid: resolved (fixed in 6.18.8-1)
trixie: resolved
No detection rules found.
No public exploits indexed.
2026-02-04
Published