Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.9
CVE-2026-68442: Linux kernel Btrfs can cause crashes after logging files
CVE-2026-68442 · published 2 months ago
Summary
The Btrfs file system in certain Linux kernel versions can mistakenly keep a flag when it splits internal data structures, leading to a situation where the system tries to use memory that has already been released. This can cause the system to stop working or restart unexpectedly. Update the kernel packages (canonical/linux-hwe-edge, canonical/linux-aws-5.0, canonical/linux-aws-5.3, canonical/linux-azure, canonical/linux-azure-5.3) to the latest version that includes the fix.
What to do
- Update debian linux to version 6.12.101-1.
- Update debian linux to version 7.1.6-1.
- Update debian linux-6.12 to version 6.12.101-1~deb12u1.
- Update linux kernel to version 7.1.6.
- Update canonical linux to version 6.8.0-147.147.
- Update canonical linux-aws to version 6.8.0-1067.70.
- Update canonical linux-aws-7.0 to version 7.0.0-1014.14~24.04.1.
- Update canonical linux-azure to version 6.8.0-1071.79.
- Update canonical linux-azure-7.0 to version 7.0.0-1017.17~24.04.1.
- Update canonical linux-azure-fde to version 6.8.0-1069.76.
- Update canonical linux-azure-fde-7.0 to version 7.0.0-1016.16~24.04.1.
- Update canonical linux-gcp to version 6.8.0-1071.79.
- Update canonical linux-gcp-7.0 to version 7.0.0-1014.14~24.04.1.
- Update canonical linux-gke to version 6.8.0-1066.74.
- Update canonical linux-gkeop to version 6.8.0-1052.56.
- Update canonical linux-hwe-7.0 to version 7.0.0-38.38~24.04.4.
- Update canonical linux-ibm to version 6.8.0-1067.68.
- Update canonical linux-lowlatency to version 6.8.0-147.147.1.
- Update canonical linux-nvidia-tegra to version 6.8.0-1036.39.
- Update canonical linux-oracle to version 6.8.0-1064.67.
- Update canonical linux-oracle-7.0 to version 7.0.0-1013.13~24.04.1.
- Update canonical linux-riscv-7.0 to version 7.0.0-38.38.1~24.04.1.
- Update canonical linux-bluefield to version 6.8.0-1033.38.
- Update canonical linux-realtime to version 6.8.1-1062.63.
- Update canonical linux-aws-fips to version 6.8.0-1067.70+fips1.
- Update canonical linux-azure-fips to version 6.8.0-1071.79+fips1.
- Update canonical linux-fips to version 6.8.0-147.147+fips1.
- Update canonical linux-gcp-fips to version 6.8.0-1071.79+fips1.
- Update canonical linux to version 7.0.0-38.38.
- Update canonical linux-aws to version 7.0.0-1014.14.
- Update canonical linux-azure to version 7.0.0-1017.17.
- Update canonical linux-azure-fde to version 7.0.0-1016.16.
- Update canonical linux-gcp to version 7.0.0-1014.14.
- Update canonical linux-gke to version 7.0.0-1008.9.
- Update canonical linux-ibm to version 7.0.0-1015.15.
- Update canonical linux-oem-7.0 to version 7.0.0-1015.15.
- Update canonical linux-oracle to version 7.0.0-1013.13.
- Update canonical linux-realtime to version 7.0.0-38.38.1.
- Update canonical linux-riscv to version 7.0.0-38.38.1.
- Update linux linux to version 2a9246a424f45f33a1b8367052611ebe874868ad or later.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Ubuntu:16.04:LTS | canonical | linux-hwe-edge | All versions |
| Ubuntu:18.04:LTS | canonical | linux-aws-5.0 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-aws-5.3 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure-5.3 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure-edge | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gcp | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gcp-5.3 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gke-4.15 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gke-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gkeop-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-hwe | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oem | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.0 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.3 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-fde | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gke | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gke-5.15 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gkeop | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gkeop-5.15 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-intel-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.10 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.14 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.6 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-raspi2 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.8 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-allwinner-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-6.8 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-5.19 | All versions |
Showing 50 of 162. Show the rest
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Ubuntu:22.04:LTS | canonical | linux-azure-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-6.8 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-6.8 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.8 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.8 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-ibm-6.8 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-intel-iot-realtime | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.8 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.8 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-5.17 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.0 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.1 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oracle-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oracle-6.8 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-realtime | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv-6.8 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-6.5 | All versions |
| Ubuntu:Pro:Realtime:22.04:LTS | canonical | linux-realtime-6.8 | All versions |
| Ubuntu:24.04:LTS | canonical | linux |
< 6.8.0-147.147 Fix: upgrade to 6.8.0-147.147
|
| Ubuntu:24.04:LTS | canonical | linux-aws |
< 6.8.0-1067.70 Fix: upgrade to 6.8.0-1067.70
|
| Ubuntu:24.04:LTS | canonical | linux-aws-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-aws-6.17 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-aws-7.0 |
< 7.0.0-1014.14~24.04.1 Fix: upgrade to 7.0.0-1014.14~24.04.1
|
| Ubuntu:24.04:LTS | canonical | linux-azure-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-azure-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-azure-6.17 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-azure-7.0 |
< 7.0.0-1017.17~24.04.1 Fix: upgrade to 7.0.0-1017.17~24.04.1
|
| Ubuntu:24.04:LTS | canonical | linux-azure-fde-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-azure-fde-6.17 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-azure-fde-7.0 |
< 7.0.0-1016.16~24.04.1 Fix: upgrade to 7.0.0-1016.16~24.04.1
|
| Ubuntu:24.04:LTS | canonical | linux-azure-nvidia | All versions |
| Ubuntu:24.04:LTS | canonical | linux-azure-nvidia-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-gcp-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-gcp-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-gcp-6.17 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-gcp-7.0 |
< 7.0.0-1014.14~24.04.1 Fix: upgrade to 7.0.0-1014.14~24.04.1
|
| Ubuntu:24.04:LTS | canonical | linux-hwe-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-hwe-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-hwe-6.17 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-hwe-7.0 |
< 7.0.0-38.38~24.04.4 Fix: upgrade to 7.0.0-38.38~24.04.4
|
| Ubuntu:24.04:LTS | canonical | linux-ibm |
< 6.8.0-1067.68 Fix: upgrade to 6.8.0-1067.68
|
| Ubuntu:24.04:LTS | canonical | linux-lowlatency |
< 6.8.0-147.147.1 Fix: upgrade to 6.8.0-147.147.1
|
| Ubuntu:24.04:LTS | canonical | linux-lowlatency-hwe-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-nvidia | All versions |
| Ubuntu:24.04:LTS | canonical | linux-nvidia-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-nvidia-6.17 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-nvidia-7.0 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-nvidia-lowlatency | All versions |
| Ubuntu:24.04:LTS | canonical | linux-nvidia-tegra |
< 6.8.0-1036.39 Fix: upgrade to 6.8.0-1036.39
|
| Ubuntu:24.04:LTS | canonical | linux-oem-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-oem-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-oem-6.17 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-oem-6.8 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-oracle |
< 6.8.0-1064.67 Fix: upgrade to 6.8.0-1064.67
|
| Ubuntu:24.04:LTS | canonical | linux-oracle-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-oracle-6.17 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-oracle-7.0 |
< 7.0.0-1013.13~24.04.1 Fix: upgrade to 7.0.0-1013.13~24.04.1
|
| Ubuntu:24.04:LTS | canonical | linux-raspi | All versions |
| Ubuntu:24.04:LTS | canonical | linux-raspi-realtime | All versions |
| Ubuntu:24.04:LTS | canonical | linux-riscv-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-riscv-6.17 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-riscv-7.0 |
< 7.0.0-38.38.1~24.04.1 Fix: upgrade to 7.0.0-38.38.1~24.04.1
|
| Ubuntu:24.04:LTS | canonical | linux-xilinx | All versions |
| Ubuntu:Nvidia-BlueField:24.04:LTS | canonical | linux-bluefield |
< 6.8.0-1033.38 Fix: upgrade to 6.8.0-1033.38
|
| Ubuntu:Pro:FIPS-updates:24.04:LTS | canonical | linux-aws-fips |
< 6.8.0-1067.70+fips1 Fix: upgrade to 6.8.0-1067.70+fips1
|
| Ubuntu:Pro:FIPS-updates:24.04:LTS | canonical | linux-azure-fips |
< 6.8.0-1071.79+fips1 Fix: upgrade to 6.8.0-1071.79+fips1
|
| Ubuntu:Pro:FIPS-updates:24.04:LTS | canonical | linux-fips |
< 6.8.0-147.147+fips1 Fix: upgrade to 6.8.0-147.147+fips1
|
| Ubuntu:Pro:FIPS-updates:24.04:LTS | canonical | linux-gcp-fips |
< 6.8.0-1071.79+fips1 Fix: upgrade to 6.8.0-1071.79+fips1
|
| Ubuntu:Pro:Realtime:24.04:LTS | canonical | linux-realtime-6.14 | All versions |
| Ubuntu:Pro:Realtime:24.04:LTS | canonical | linux-realtime-6.17 | All versions |
| Ubuntu:26.04:LTS | canonical | linux-nvidia-bos | All versions |
| Ubuntu:26.04:LTS | canonical | linux-oem-7.0 |
< 7.0.0-1015.15 Fix: upgrade to 7.0.0-1015.15
|
| – | linux | linux |
< 2a9246a424f45f33a1b8367052611ebe874868ad 6.8 |
| Debian:13 | debian | linux |
< 6.12.101-1 Fix: upgrade to 6.12.101-1
|
| Debian:14 | debian | linux |
< 7.1.6-1 Fix: upgrade to 7.1.6-1
|
| Debian:12 | debian | linux-6.12 |
< 6.12.101-1~deb12u1 Fix: upgrade to 6.12.101-1~deb12u1
|
| Linux | linux | kernel |
>= 6.19.0, < 7.1.6 Fix: upgrade to 7.1.6
|
| Ubuntu:24.04:LTS | canonical | linux-azure |
< 6.8.0-1071.79 Fix: upgrade to 6.8.0-1071.79
|
| Ubuntu:24.04:LTS | canonical | linux-azure-fde |
< 6.8.0-1069.76 Fix: upgrade to 6.8.0-1069.76
|
| Ubuntu:24.04:LTS | canonical | linux-gcp |
< 6.8.0-1071.79 Fix: upgrade to 6.8.0-1071.79
|
| Ubuntu:24.04:LTS | canonical | linux-gke |
< 6.8.0-1066.74 Fix: upgrade to 6.8.0-1066.74
|
| Ubuntu:24.04:LTS | canonical | linux-gkeop |
< 6.8.0-1052.56 Fix: upgrade to 6.8.0-1052.56
|
| Ubuntu:Pro:Realtime:24.04:LTS | canonical | linux-realtime |
< 6.8.1-1062.63 Fix: upgrade to 6.8.1-1062.63
|
| Ubuntu:26.04:LTS | canonical | linux |
< 7.0.0-38.38 Fix: upgrade to 7.0.0-38.38
|
| Ubuntu:26.04:LTS | canonical | linux-aws |
< 7.0.0-1014.14 Fix: upgrade to 7.0.0-1014.14
|
| Ubuntu:26.04:LTS | canonical | linux-azure |
< 7.0.0-1017.17 Fix: upgrade to 7.0.0-1017.17
|
| Ubuntu:26.04:LTS | canonical | linux-azure-fde |
< 7.0.0-1016.16 Fix: upgrade to 7.0.0-1016.16
|
| Ubuntu:26.04:LTS | canonical | linux-gcp |
< 7.0.0-1014.14 Fix: upgrade to 7.0.0-1014.14
|
| Ubuntu:26.04:LTS | canonical | linux-gke |
< 7.0.0-1008.9 Fix: upgrade to 7.0.0-1008.9
|
| Ubuntu:26.04:LTS | canonical | linux-ibm |
< 7.0.0-1015.15 Fix: upgrade to 7.0.0-1015.15
|
| Ubuntu:26.04:LTS | canonical | linux-oracle |
< 7.0.0-1013.13 Fix: upgrade to 7.0.0-1013.13
|
| Ubuntu:26.04:LTS | canonical | linux-realtime |
< 7.0.0-38.38.1 Fix: upgrade to 7.0.0-38.38.1
|
| Ubuntu:26.04:LTS | canonical | linux-riscv |
< 7.0.0-38.38.1 Fix: upgrade to 7.0.0-38.38.1
|
Original advisory text
btrfs: don't propagate EXTENT_FLAG_LOGGING to split extent maps
In the Linux kernel, the following vulnerability has been resolved: btrfs: don't propagate EXTENT_FLAG_LOGGING to split extent maps When btrfs_drop_extent_map_range() splits an extent map, the new split maps inherit the original map's flags through a local 'flags' variable. Commit f86f7a75e2fb ("btrfs: use the flags of an extent map to identify the compression type") changed the EXTENT_FLAG_LOGGING clearing to operate on em->flags instead of that local 'flags' copy, so a split of an extent map that is currently being logged wrongly inherits EXTENT_FLAG_LOGGING. The flag is then never cleared on the split, and when it is freed while still on the inode's modified_extents list (for example by the extent map shrinker) it trips the WARN_ON(!list_empty(&em->list)) in btrfs_free_extent_map() and leads to a use-after-free. Clear EXTENT_FLAG_LOGGING from the local 'flags' copy used for the splits and only clear EXTENT_FLAG_PINNED from em->flags, restoring the behaviour prior to f86f7a75e2fb.
References
- https://ubuntu.com/security/CVE-2026-68442 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2026-68442 Third Party Advisory
- https://git.kernel.org/stable/c/0e465c63f103a5ce6849614d6bda048d70eebec8 Third Party Advisory
- https://git.kernel.org/stable/c/5eff4d5b17fa1950e80bfd1ba43dc0699e61a644 Third Party Advisory
- https://git.kernel.org/stable/c/2a9246a424f45f33a1b8367052611ebe874868ad Third Party Advisory
- https://security-tracker.debian.org/tracker/CVE-2026-68442 Vendor Advisory
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/68xxx/CVE-2026-68442... Vendor Advisory
- https://git.kernel.org/stable/c/9304713b70e7e1450e3a76e758836fe5391bfa95 Third Party Advisory
- https://ubuntu.com/security/notices/USN-8888-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8889-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8887-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8886-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8888-2 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8887-2 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8887-3 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8917-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8918-1 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-68442 Vendor Advisory
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git Product
Internet-facing
14 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit
- Gives an attacker full control
Severity
7.9
High
Type
CWE-416Use After Free
Timeline
Published12 Aug 2026
Updated28 Oct 2026
First seen12 Aug 2026
Sources
CVE-2026-68442 · NVD
CVE-2026-68442 · MITRE
DEBIAN-CVE-2026-68442 · OSV
UBUNTU-CVE-2026-68442 · OSV
CVE-2026-68442 · OSV
Track software like this
Free during beta