Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2026-43359

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix transaction abort on set received ioctl due to item overflow If the set received ioctl fails due to an item overflow when attempting to add the BTRFS_UUID_KEY_RECEIVED_SUBVOL we have to abort the transaction since we did some metadata updates before. This means that if a user calls this ioctl with the same received UUID field for a lot of subvolumes, we will hit the overflow, trigger the transaction abort and turn
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:db993386d7780b09c0ff54dc6411002c0b04af79a20d2d0fdf370cd98cca53d9
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"affected","product":"Linux","programFiles":["fs/btrfs/ioctl.c","fs/btrfs/uuid-tree.c","fs/btrfs/uuid-tree.h"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"3.12"},{"lessThan":"3.12","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.167","versionType":"semver"},{"lessThanOrEqual":"6.6.*","status":"unaffected","version":"6.6.130","versionType":"semver"},{"lessThanOrEqual":"6.12.*","status":"unaffected","version":"6.12…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:9ed371d5b4b1ecd0c6923e9cf5781d9dd5a95d680d687008f60f95bcacdb104f · sha256:5b6a0311c6740bf2… · /containers/cna/affected/1

{"defaultStatus":"unaffected","product":"Linux","programFiles":["fs/btrfs/ioctl.c","fs/btrfs/uuid-tree.c","fs/btrfs/uuid-tree.h"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"b9914db13ac15aca3b74544c0bb1a2e0dad1f174","status":"affected","version":"dd5f9615fc5c5e8d3751aab3a17b92768fb1ce70","versionType":"git"},{"lessThan":"b19c0465e4daad5aa8f60552ea0578cf31a11b1e","status":"affected","version":"dd5f9615fc5c5e8d3751aab3a17b92768fb1ce70","versionType":"git"},{"lessThan":"2e57b8cac2ba0d38aac76c1ecdfd8b899e3581a5","status":"affe…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:9ed371d5b4b1ecd0c6923e9cf5781d9dd5a95d680d687008f60f95bcacdb104f · sha256:5b6a0311c6740bf2… · /containers/cna/affected/0

Affected products and versions

2 source assertions
{"defaultStatus":"affected","product":"Linux","programFiles":["fs/btrfs/ioctl.c","fs/btrfs/uuid-tree.c","fs/btrfs/uuid-tree.h"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"3.12"},{"lessThan":"3.12","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.167","versionType":"semver"},{"lessThanOrEqual":"6.6.*","status":"unaffected","version":"6.6.130","versionType":"semver"},{"lessThanOrEqual":"6.12.*","status":"unaffected","version":"6.12…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:9ed371d5b4b1ecd0c6923e9cf5781d9dd5a95d680d687008f60f95bcacdb104f · sha256:5b6a0311c6740bf2… · /containers/cna/affected/1
{"defaultStatus":"unaffected","product":"Linux","programFiles":["fs/btrfs/ioctl.c","fs/btrfs/uuid-tree.c","fs/btrfs/uuid-tree.h"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"b9914db13ac15aca3b74544c0bb1a2e0dad1f174","status":"affected","version":"dd5f9615fc5c5e8d3751aab3a17b92768fb1ce70","versionType":"git"},{"lessThan":"b19c0465e4daad5aa8f60552ea0578cf31a11b1e","status":"affected","version":"dd5f9615fc5c5e8d3751aab3a17b92768fb1ce70","versionType":"git"},{"lessThan":"2e57b8cac2ba0d38aac76c1ecdfd8b899e3581a5","status":"affe…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:9ed371d5b4b1ecd0c6923e9cf5781d9dd5a95d680d687008f60f95bcacdb104f · sha256:5b6a0311c6740bf2… · /containers/cna/affected/0

Source references

6 source assertions
{"url":"https://git.kernel.org/stable/c/2e57b8cac2ba0d38aac76c1ecdfd8b899e3581a5"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:9ed371d5b4b1ecd0c6923e9cf5781d9dd5a95d680d687008f60f95bcacdb104f · sha256:5b6a0311c6740bf2… · /containers/cna/references/2
{"url":"https://git.kernel.org/stable/c/41fb97353ff58fa4f31904c343fc8e3df2f7517d"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:9ed371d5b4b1ecd0c6923e9cf5781d9dd5a95d680d687008f60f95bcacdb104f · sha256:5b6a0311c6740bf2… · /containers/cna/references/4
{"url":"https://git.kernel.org/stable/c/87f2c46003fce4d739138aab4af1942b1afdadac"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:9ed371d5b4b1ecd0c6923e9cf5781d9dd5a95d680d687008f60f95bcacdb104f · sha256:5b6a0311c6740bf2… · /containers/cna/references/5
{"url":"https://git.kernel.org/stable/c/b19c0465e4daad5aa8f60552ea0578cf31a11b1e"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:9ed371d5b4b1ecd0c6923e9cf5781d9dd5a95d680d687008f60f95bcacdb104f · sha256:5b6a0311c6740bf2… · /containers/cna/references/1
{"url":"https://git.kernel.org/stable/c/b9914db13ac15aca3b74544c0bb1a2e0dad1f174"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:9ed371d5b4b1ecd0c6923e9cf5781d9dd5a95d680d687008f60f95bcacdb104f · sha256:5b6a0311c6740bf2… · /containers/cna/references/0
{"url":"https://git.kernel.org/stable/c/d11aefe654a04fc41996d254748d6a38b6b0a7be"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:9ed371d5b4b1ecd0c6923e9cf5781d9dd5a95d680d687008f60f95bcacdb104f · sha256:5b6a0311c6740bf2… · /containers/cna/references/3

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer