CVE-2026-45974
Analyzed Analyzed - Analysis Complete
Btrfs Invalid Leaf Access in quota enable

Publication date: 2026-05-27

Last updated on: 2026-06-16

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: btrfs: fix invalid leaf access in btrfs_quota_enable() if ref key not found If btrfs_search_slot_for_read() returns 1, it means we did not find any key greater than or equals to the key we asked for, meaning we have reached the end of the tree and therefore the path is not valid. If this happens we need to break out of the loop and stop, instead of continuing and accessing an invalid path.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2026-05-27
Last Modified
2026-06-16
Generated
2026-06-16
AI Q&A
2026-05-27
EPSS Evaluated
2026-06-15
NVD
CVE-2026-45974
EUVD
EUVD-2026-32258
Affected Vendors & Products
Showing 15 associated CPEs
Vendor Product Version / Range
linux linux_kernel 5.10
linux linux_kernel 5.10
linux linux_kernel 5.10
linux linux_kernel From 5.9.7 (inc) to 5.10 (exc)
linux linux_kernel 5.10
linux linux_kernel 5.10
linux linux_kernel 5.10
linux linux_kernel 5.10
linux linux_kernel From 6.13 (inc) to 6.18.14 (exc)
linux linux_kernel From 6.19 (inc) to 6.19.4 (exc)
linux linux_kernel From 6.2 (inc) to 6.6.128 (exc)
linux linux_kernel From 6.7 (inc) to 6.12.75 (exc)
linux linux_kernel From 5.11 (inc) to 5.15.202 (exc)
linux linux_kernel From 5.16 (inc) to 6.1.165 (exc)
linux linux_kernel From 5.10.1 (inc) to 5.10.252 (exc)
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Executive Summary

This vulnerability exists in the Linux kernel's btrfs filesystem code, specifically in the function btrfs_quota_enable(). The issue arises when the function btrfs_search_slot_for_read() returns 1, indicating that no key greater than or equal to the requested key was found, meaning the end of the tree has been reached and the path is invalid.

Due to improper handling of this condition, the code continues to access an invalid path, which can lead to invalid leaf access. The fix involves breaking out of the loop and stopping when this condition is detected to prevent accessing invalid memory.

Impact Analysis

Accessing invalid paths in the filesystem code can lead to system instability, crashes, or potential data corruption. While the exact impact is not detailed, such invalid memory accesses in kernel code can also potentially be exploited to cause denial of service or other unintended behavior.

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-45974. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart