CVE Explorer

CVE-2026-23018

In the Linux kernel, the following vulnerability has been resolved: btrfs: release path before initializing extent tree in btrfs_read_locked_inode() In btrfs_read_locked_inode() we are calling btrfs_init_file_extent_tree() while holding a path with a read locked leaf from a subvolume tree, and btrfs_init_file_extent_tree() may do a GFP_KERNEL allocation, which can trigger reclaim. This can create a circular lock dependency which lockdep warns about with the following splat: [6.1433] =====

Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:2ac8fe696a2dd15e2ce7633c6d1d9af56deeb94536fe339b520af0b6f85d18ae

Known exploited

Not asserted

Disputed

Stale source

Conflicts

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"affected","product":"Linux","programFiles":["fs/btrfs/inode.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"6.17"},{"lessThan":"6.17","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"6.18.*","status":"unaffected","version":"6.18.6","versionType":"semver"},{"lessThanOrEqual":"*","status":"unaffected","version":"6.19","versionType":"original_commit_for_fix"}]}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:b46738c8936c11e0e7e777387c01432d5d64d5250ab0ede556149741ecb98602 · sha256:8ec03e9c76e0eca3… · /containers/cna/affected/1

{"defaultStatus":"unaffected","product":"Linux","programFiles":["fs/btrfs/inode.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"92a5590851144f034adc51fee55e6878ccac716e","status":"affected","version":"8679d2687c351824d08cf1f0e86f3b65f22a00fe","versionType":"git"},{"lessThan":"8731f2c50b0b1d2b58ed5b9671ef2c4bdc2f8347","status":"affected","version":"8679d2687c351824d08cf1f0e86f3b65f22a00fe","versionType":"git"},{"status":"affected","version":"e8f496001e0c7832d188ab91fea294e19a128202","versionType":"git"},{"lessThan":"6.17","…

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:b46738c8936c11e0e7e777387c01432d5d64d5250ab0ede556149741ecb98602 · sha256:8ec03e9c76e0eca3… · /containers/cna/affected/0

Affected products and versions

2 source assertions

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:b46738c8936c11e0e7e777387c01432d5d64d5250ab0ede556149741ecb98602 · sha256:8ec03e9c76e0eca3… · /containers/cna/affected/1

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:b46738c8936c11e0e7e777387c01432d5d64d5250ab0ede556149741ecb98602 · sha256:8ec03e9c76e0eca3… · /containers/cna/affected/0

Source references

2 source assertions

{"url":"https://git.kernel.org/stable/c/8731f2c50b0b1d2b58ed5b9671ef2c4bdc2f8347"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:b46738c8936c11e0e7e777387c01432d5d64d5250ab0ede556149741ecb98602 · sha256:8ec03e9c76e0eca3… · /containers/cna/references/1

{"url":"https://git.kernel.org/stable/c/92a5590851144f034adc51fee55e6878ccac716e"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:b46738c8936c11e0e7e777387c01432d5d64d5250ab0ede556149741ecb98602 · sha256:8ec03e9c76e0eca3… · /containers/cna/references/0

Attribution and limitations

CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer