CVE-2026-43359— btrfs set received ioctl 事务中止漏洞
获取后续新漏洞提醒登录后订阅
一、 漏洞 CVE-2026-43359 基础信息
漏洞信息
对漏洞内容有疑问？看看神龙的深度分析是否有帮助！
查看神龙十问 ↗ 尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
btrfs: fix transaction abort on set received ioctl due to item overflow
来源: 美国国家漏洞数据库 NVD
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: btrfs: fix transaction abort on set received ioctl due to item overflow If the set received ioctl fails due to an item overflow when attempting to add the BTRFS_UUID_KEY_RECEIVED_SUBVOL we have to abort the transaction since we did some metadata updates before. This means that if a user calls this ioctl with the same received UUID field for a lot of subvolumes, we will hit the overflow, trigger the transaction abort and turn the filesystem into RO mode. A malicious user could exploit this, and this ioctl does not even requires that a user has admin privileges (CAP_SYS_ADMIN), only that he/she owns the subvolume. Fix this by doing an early check for item overflow before starting a transaction. This is also race safe because we are holding the subvol_sem semaphore in exclusive (write) mode. A test case for fstests will follow soon.
来源: 美国国家漏洞数据库 NVD
CVSS Information
N/A
来源: 美国国家漏洞数据库 NVD
Vulnerability Type
N/A
来源: 美国国家漏洞数据库 NVD
受影响产品
二、漏洞 CVE-2026-43359 的公开POC
| # | POC 描述 | 源链接 | 神龙链接 |
|---|
AI 生成 POC高级
未找到公开 POC。
登录以生成 AI POC三、漏洞 CVE-2026-43359 的情报信息
Please 登录 to view more intelligence information
同批安全公告 · Linux · 2026-05-08 · 共 199 条
| CVE-2026-43337 | AMD dcn401_init_hw函数空指针解引用漏洞 | |
| CVE-2026-43349 | f2fs 节点页脚检查未初始化值访问漏洞 | |
| CVE-2026-43348 | mshv_vtl vmemmap_shift溢出漏洞 | |
| CVE-2026-43347 | QCOM Monaco 内核 Gunyah 元数据区保留漏洞 | |
| CVE-2026-43346 | ice ptp 控制 PF 不可用时误报警告 | |
| CVE-2026-43345 | IPA v5.0+ 事件环索引未编程漏洞 | |
| CVE-2026-43344 | Intel x86 uncore die ID初始化与查找漏洞 | |
| CVE-2026-43343 | USB gadget f_subset unbalanced refcnt漏洞 | |
| CVE-2026-43342 | USB gadget RNDIS 竞争条件漏洞 | |
| CVE-2026-43340 | Comedi 设备自旋锁未重新初始化漏洞 | |
| CVE-2026-43341 | IPv6 ioam6追踪填充模式长包装漏洞 | |
| CVE-2026-43339 | IPv6 addrconf_permanent_addr()使用-after-free漏洞 | |
| CVE-2026-43338 | btrfs 配额组 ioctls 事务项预留不足漏洞 | |
| CVE-2026-43331 | x86 kexec KCOV 工具链加载段后禁用漏洞 | |
| CVE-2026-43325 | iwlwifi 无线驱动不支持6GHz时发送无效命令 | |
| CVE-2026-43327 | USB dummy-hcd 锁定同步漏洞 | |
| CVE-2026-43329 | Netfilter Flowtable 最大动作数校验漏洞 | |
| CVE-2026-43328 | CPU频率调整器：cpufreq_dbs_governor_init()错误路径下双重释放漏洞 | |
| CVE-2026-43330 | caam驱动HMAC长密钥整数溢出漏洞 | |
| CVE-2026-43334 | 蓝牙 SMP 强制 MITM 要求漏洞 |
显示前 20 条，共 199 条。 查看全部 → →
IV. Related Vulnerabilities
V. Comments for CVE-2026-43359
暂无评论