CVE-2026-43358

Source
https://cve.org/CVERecord?id=CVE-2026-43358
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-43358.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-43358
Downstream
Published
2026-05-08T14:21:13Z
Modified
2026-10-20T10:30:57Z
Summary
btrfs: add missing RCU unlock in error path in try_release_subpage_extent_buffer()
Details

In the Linux kernel, the following vulnerability has been resolved:

btrfs: add missing RCU unlock in error path in try_release_subpage_extent_buffer()

Call rcu_read_lock() before exiting the loop in try_release_subpage_extent_buffer() because there is a rcu_read_unlock() call past the loop.

This has been detected by the Clang thread-safety analyzer.

Database specific
{
    "cna_assigner":  "Linux",
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/43xxx/CVE-2026-43358.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
ad580dfa388fabb52af033e3f8cc5d04be985e54
Fixed
5e1ab71f74a1e61f1254dff128a764fdebaec0b8
Fixed
35b0c8768e848e1b7e32052db36b5fa59b6a33a1
Fixed
b2840e33127ce0eea880504b7f133e780f567a9b
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
6.16.4
Fixed
6.17
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
10ec363cfefeeb77fda4c1ac20a531f21de45264

Affected versions

v6.*
v6.16.10
v6.16.11
v6.16.12
v6.16.4
v6.16.5
v6.16.6
v6.16.7
v6.16.8
v6.16.9

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-43358.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
6.17.0
Fixed
6.18.19
Type
ECOSYSTEM
Events
Introduced
6.19.0
Fixed
6.19.9

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-43358.json"