btrfs Vulnerability in Linux Kernel by Linux Foundation

CVE-2026-31666

What is CVE-2026-31666?

A vulnerability in the btrfs component of the Linux kernel has been identified due to improper return value handling during the lookup of extent data references. Following a code refactor, the logic incorrectly returns a success response even when the lookup fails due to mismatched keys. This issue leads to potential operations on incorrect extent tree items, risking integrity and corrupting the extent tree. A fix has been applied to ensure that the appropriate error code is returned, maintaining the operational integrity of the btrfs file system.

References