CVE-2026-68442— btrfs 不传播 EXTENT_FLAG_LOGGING 至分割的扩展映射
可能的 ATT&CK 技术 1AI
T1499 · Endpoint Denial of Service影响版本矩阵 10
| 厂商 | 产品 | 版本范围 | 状态 |
|---|---|---|---|
| Linux | Linux | f86f7a75e2fb5fd7d31d00eab8a392f97ba42ce9< 2a9246a424f45f33a1b8367052611ebe874868ad | affected |
f86f7a75e2fb5fd7d31d00eab8a392f97ba42ce9< 9304713b70e7e1450e3a76e758836fe5391bfa95 | affected | ||
f86f7a75e2fb5fd7d31d00eab8a392f97ba42ce9< 0e465c63f103a5ce6849614d6bda048d70eebec8 | affected | ||
f86f7a75e2fb5fd7d31d00eab8a392f97ba42ce9< 5eff4d5b17fa1950e80bfd1ba43dc0699e61a644 | affected | ||
6.8 | affected | ||
< 6.8 | unaffected | ||
6.12.101≤ 6.12.* | unaffected | ||
6.18.42≤ 6.18.* | unaffected | ||
| … +2 条更多 | |||
获取后续新漏洞提醒登录后订阅
一、 漏洞 CVE-2026-68442 基础信息
漏洞信息
对漏洞内容有疑问？看看神龙的深度分析是否有帮助！
查看神龙十问 ↗ 尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
btrfs: don't propagate EXTENT_FLAG_LOGGING to split extent maps
来源: CVE Program / CVE List V5
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: btrfs: don't propagate EXTENT_FLAG_LOGGING to split extent maps When btrfs_drop_extent_map_range() splits an extent map, the new split maps inherit the original map's flags through a local 'flags' variable. Commit f86f7a75e2fb ("btrfs: use the flags of an extent map to identify the compression type") changed the EXTENT_FLAG_LOGGING clearing to operate on em->flags instead of that local 'flags' copy, so a split of an extent map that is currently being logged wrongly inherits EXTENT_FLAG_LOGGING. The flag is then never cleared on the split, and when it is freed while still on the inode's modified_extents list (for example by the extent map shrinker) it trips the WARN_ON(!list_empty(&em->list)) in btrfs_free_extent_map() and leads to a use-after-free. Clear EXTENT_FLAG_LOGGING from the local 'flags' copy used for the splits and only clear EXTENT_FLAG_PINNED from em->flags, restoring the behaviour prior to f86f7a75e2fb.
来源: CVE Program / CVE List V5
CVSS Information
N/A
来源: CVE Program / CVE List V5
Vulnerability Type
N/A
来源: CVE Program / CVE List V5
受影响产品
二、漏洞 CVE-2026-68442 的公开POC
| # | POC 描述 | 源链接 | 神龙链接 |
|---|
AI 生成 POC高级
未找到公开 POC。
登录以生成 AI POC三、漏洞 CVE-2026-68442 的情报信息
请登录查看更多情报信息。
CVE-2026-68442 补丁与修复 (4)
同批安全公告 · Linux · 2026-08-12 · 共 22 条
| CVE-2026-68439 | mt7925驱动NULL指针解引用漏洞 | |
| CVE-2026-68429 | drm_dp_mst_topology_queue_probe()处理拓扑断裂漏洞 | |
| CVE-2026-68430 | AMDGPU 驱动无用BUG_ON()漏洞 | |
| CVE-2026-68431 | ksmbd 验证变换请求最小 PDU 尺寸 | |
| CVE-2026-68432 | VXLAN 变更链接时未要求 CAP_NET_ADMIN 权限 | |
| CVE-2026-68433 | libceph 回复解码越界漏洞 | |
| CVE-2026-68434 | serial: 8250_mid DNV/ICX-D/SNR平台空指针解引用漏洞 | |
| CVE-2026-68435 | LoongArch: kexec命令行查找地址空间不匹配漏洞 | |
| CVE-2026-68436 | AMD Display驱动结构dc分配漏洞 | |
| CVE-2026-68437 | Imagination GPU 驱动 CCCB 错误导致远程代码执行漏洞 | |
| CVE-2026-68438 | SMP CSD锁获取原子化调试模式漏洞 | |
| CVE-2026-68450 | btrfs 重复重定位根插入时释放映射节点漏洞 | |
| CVE-2026-68440 | txgbe驱动模块EEPROM读取时存在堆溢出漏洞 | |
| CVE-2026-68441 | net/sched: TC_ACT_REDIRECT 处理漏洞 | |
| CVE-2026-68443 | Gigabyte Waterforce 设备IO在hid_hw_stop前未停止漏洞 | |
| CVE-2026-68444 | arm_ffa固件 ffa_partition_info_get()空指针解引用漏洞 | |
| CVE-2026-68445 | drm/vc4: 防止着色器缓冲区映射变为可写漏洞 | |
| CVE-2026-68446 | vmwgfx数组大小验证漏洞 | |
| CVE-2026-68447 | AMD amdkfd:限制v9 CRIU控制栈检查点复制到BO大小 | |
| CVE-2026-68448 | overlayfs copy_file_range 源文件访问控制漏洞 |
显示前 20 条，共 22 条。 查看全部 → →
IV. Related Vulnerabilities
V. Comments for CVE-2026-68442
暂无评论