CVE-2026-45974 Details
Description
In the Linux kernel, the following vulnerability has been resolved: btrfs: fix invalid leaf access in btrfs_quota_enable() if ref key not found If btrfs_search_slot_for_read() returns 1, it means we did not find any key greater than or equals to the key we asked for, meaning we have reached the end of the tree and therefore the path is not valid. If this happens we need to break out of the loop and stop, instead of continuing and accessing an invalid path.
A vulnerability has been identified in the Linux kernel's Btrfs file system, specifically within the quota management feature. The issue arises in the 'btrfs_quota_enable' function, where the code improperly handles tree navigation after a search operation. When the search function indicates that no valid keys are found, the code should terminate the loop to prevent accessing an invalid path. This flaw could lead to incorrect quota management behavior.
Users can apply the latest patches available in the Linux kernel stable tree to address this vulnerability.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://git.kernel.org/stable/c/023545e272f369d487e6a986c1e321c6e04be1da | kernel.org | Patch |
| https://git.kernel.org/stable/c/0761447f6f51e1c7997960d8e6559337deed6729 | kernel.org | Patch |
| https://git.kernel.org/stable/c/1ee1d006c9fe4d6be5527ab1c84216b80cccbe40 | kernel.org | Patch |
| https://git.kernel.org/stable/c/b2bd557b75b760e4b9d209112bda19314bd64558 | kernel.org | Patch |
| https://git.kernel.org/stable/c/b5b8ade9da452086e78f5d519b90d3769e354853 | kernel.org | Patch |
| https://git.kernel.org/stable/c/d7cf2314dd5e8661c05d076cd627eea9a7f76616 | kernel.org | Patch |
| https://git.kernel.org/stable/c/ecb7c2484cfc83a93658907580035a8adf1e0a92 | kernel.org | Patch |
| https://git.kernel.org/stable/c/fd4913a53e3b54ad7e161847291439fe445d6356 | kernel.org | Patch |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| NVD-CWE-noinfo | Insufficient Information to Classify Weakness | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| linux linux kernel | >= 5.9.7, < 5.10 >= 5.10.1, < 5.10.252 >= 5.11, < 5.15.202 >= 5.16, < 6.1.165 >= 6.2, < 6.6.128 >= 6.7, < 6.12.75 >= 6.13, < 6.18.14 >= 6.19, < 6.19.4 5.10 - 5.10 rc2 5.10 rc3 5.10 rc4 5.10 rc5 5.10 rc6 5.10 rc7 |
CPE
Remediation
| |
Change History
3 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | kernel.org |
| Jun 16, 2026 | Initial Analysis | [email protected] |
| May 27, 2026 | New CVE Received | kernel.org |