CVE-2026-43308

medium

Description

In the Linux kernel, the following vulnerability has been resolved: btrfs: don't BUG() on unexpected delayed ref type in run_one_delayed_ref() There is no need to BUG(), we can just return an error and log an error message.

References

https://git.kernel.org/stable/c/c7d1d4ff56744074e005771aff193b927392d51f

https://git.kernel.org/stable/c/a5ac87aabdedd31e832b40466605e83f428136aa

https://git.kernel.org/stable/c/6ad4caadc6343c3d7987bf3211f15d66135c4c42

https://git.kernel.org/stable/c/5549743e11c06da23cfa7712a994b9f1e69064c6

https://git.kernel.org/stable/c/0e77f1c8ebf5b1f858b5ac613baceb79919d6d3f

https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-28578

Details

Source: Mitre, NVD

Published: 2026-05-08

Updated: 2026-10-21

Named Vulnerability: GHSA-mjx9-cr34-jhff

Risk Information

CVSS v2

Base Score: 4.6

Vector: CVSS2#AV:L/AC:L/Au:S/C:N/I:N/A:C

Severity: Medium

CVSS v3

Base Score: 5.5

Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H