Linux Kernel Vulnerability in Btrfs Logging Mechanism

CVE-2026-43118

What is CVE-2026-43118?

A logging issue in the Btrfs file system of the Linux kernel can lead to incorrect inode sizes after a log replay. When an inode is logged with a reset generation and its size is zero, subsequent logging actions can cause the system to skip updating the inode's size during log replay. This can result in the inode maintaining an incorrect size, particularly if a hard link or rename occurs after the initial logging. This vulnerability emphasizes the importance of accurate inode size handling during logging operations to ensure system integrity across unexpected shutdowns.

References