Btrfs Free Space Cache Vulnerability in Linux Kernel

CVE-2026-64567

What is CVE-2026-64567?

A vulnerability in the Btrfs free space cache within the Linux kernel allows unauthorized memory access during the loading process due to inadequate validation of entry counts. When loading a version 1 free space cache, the system relies on values from the on-disk Btrfs free space header without proper checks. If an attacker manipulates these values, it can result in reading beyond allocated memory, possibly leading to data corruption or crashes. This flaw necessitates the implementation of additional checks to safeguard against corrupted cache data and ensure stability.

References