Medium 5.5Published May 8, 2026

CVE-2026-43358btrfs: add missing RCU unlock in error path in try_release_subpage_extent_buffer()

Updated under an hour ago (Oct 26, 2026, 1:20 PM ET)

Does this affect you?

It affects Linux and 1 other product. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: btrfs: add missing RCU unlock in error path in try_release_subpage_extent_buffer() Call rcu_read_lock() before exiting the loop in try_release_subpage_extent_buffer() because there is a rcu_read_unlock() call past the loop. This has been detected by the Clang thread-safety analyzer.

CVSS: 5.5 MEDIUM (v3.1, NVD)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Analyzed
Record last updated: May 23, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from ad580dfa388fabb52af033e3f8cc5d04be985e54 before 5e1ab71f74a1e61f1254dff128a764fdebaec0b8; from ad580dfa388fabb52af033e3f8cc5d04be985e54 before 35b0c8768e848e1b7e32052db36b5fa59b6a33a1; from ad580dfa388fabb52af033e3f8cc5d04be985e54 before b2840e33127ce0eea880504b7f133e780f567a9b; 10ec363cfefeeb77fda4c1ac20a531f21de45264; from 6.16.4 before 6.17	CNA record
linux linux_kernel linux:linux_kernel	from 6.16.4 before 6.17; from 6.17.1 before 6.18.19; from 6.19 before 6.19.9; 6.17; 6.17; 6.17; 6.17; 6.17; and 5 more ranges	NVD

References

References

https://git.kernel.org/stable/c/5e1ab71f74a1e61f1254dff128a764fdebaec0b8	patch
https://git.kernel.org/stable/c/35b0c8768e848e1b7e32052db36b5fa59b6a33a1	patch
https://git.kernel.org/stable/c/b2840e33127ce0eea880504b7f133e780f567a9b	patch

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.