CVE-2026-43308

CVE-2026-43308

Medium · published May 8, 2026

CVSS v3.1
5.5
EPSS
0%
Percentile
5.0
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

btrfs: don't BUG() on unexpected delayed ref type in run_one_delayed_ref()

There is no need to BUG(), we can just return an error and log an error

message.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00162 · 5.0th percentile
Published
2026-05-08T18:16Z
Affected products (1)
ProductVersionsFixed in
linux/linux_kernel≥ 2.6.31, < 6.19.66.19.6
References (5)
https://git.kernel.org/stable/c/0e77f1c8ebf5b1f858b5ac613baceb79919d6d3f · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/5549743e11c06da23cfa7712a994b9f1e69064c6 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/6ad4caadc6343c3d7987bf3211f15d66135c4c42 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/a5ac87aabdedd31e832b40466605e83f428136aa · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/c7d1d4ff56744074e005771aff193b927392d51f · 416baaa9-dc9f-4396-8d5f-8c081fb06d67
EPSS history
Timeline
  • 08 MAY 13:11Z
    btrfs: don't BUG() on unexpected delayed ref type in run_one_delayed_ref()
    cvelistv5