CVE-2026-68442General

LOWCVSS 7.8 · HIGH

Signal is active with 2 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

In the Linux kernel, the following vulnerability has been resolved: btrfs: don't propagate EXTENT_FLAG_LOGGING to split extent maps When btrfs_drop_extent_map_range() splits an extent map, the new split maps inherit the original map's flags through a local 'flags' variable. Commit f86f7a75e2fb ("btrfs: use the flags of an extent map to identify the compression type") changed the EXTENT_FLAG_LOGGING clearing to operate on em->flags instead of that local 'flags' copy, so a split of an extent map that is currently being logged wrongly inherits EXTENT_FLAG_LOGGING. The flag is then never cleared on the split, and when it is freed while still on the inode's modified_extents list (for example by the extent map shrinker) it trips the WARN_ON(!list_empty(&em->list)) in btrfs_free_extent_map() and leads to a use-after-free. Clear EXTENT_FLAG_LOGGING from the local 'flags' copy used for the splits and only clear EXTENT_FLAG_PINNED from em->flags, restoring the behaviour prior to f86f7a75e2fb.

0.0/ 10 priority

Sources & remediation

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

  • 2 mentions across 1 observed day

What's happening

  • Technical details provided in 1 signal
  • General: 2 classified signals
  • 2 total mentions across 1 day

Deep dive

Activity timeline2 mentions / 1d
01122Mentions · 2026-08-12: 2Technical Details · 2026-08-12: 108-12
Signal classification1 categories
General
2100.0%
Referenced assets2 URLs
Full discourse2 posts
  • VulDB 🛡@vuldb
    General

    We have just added an important vulnerability affecting Linux Kernel (CVE-2026-68442) https://vuldb.com/vuln/388895

    Post summary

    The post announces the addition of CVE-2026-68442 to a vulnerability database, with no further technical, exploit, or remediation information provided.

    00000117
    2.3K followersView on X
  • Vulmon Vulnerability Feed@VulmonFeeds
    General

    CVE-2026-68442 Linux Kernel btrfs Use-After-Free Due to EXTENT_FLAG_LOGGING Propagation https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-68442

    Post summary

    The post announces CVE‑2026‑68442 as a Linux Kernel btrfs use‑after‑free issue and links to an external detail page, but provides no exploit or mitigation information.

    00000111
    4.1K followersView on X

Explore more