CVE-2026-43308

MEDIUM
MEDIUM Priority: 0.01 BB Relevance: 36/100
Published: 2026-05-08 Modified: 2026-10-30 First seen: 2026-10-30 Status: active

Attack Surface

Low Complexity No Interaction

CVSS Vector Breakdown

AV: Local
AC: Low
PR: Low
UI: None
S: Unchanged
C: None
I: None
A: High

Description

In the Linux kernel, the following vulnerability has been resolved: btrfs: don't BUG() on unexpected delayed ref type in run_one_delayed_ref() There is no need to BUG(), we can just return an error and log an error message.

Affected Software (8)

VendorProductVersion
Linux Linux 5d4f98a28c7d334091c1b7744f48a1acdd2a4ae0 < c614b64bee2c3cbb0c80dd3a9ee492c74364e275
Linux Linux 5d4f98a28c7d334091c1b7744f48a1acdd2a4ae0 < 0e77f1c8ebf5b1f858b5ac613baceb79919d6d3f
Linux Linux 5d4f98a28c7d334091c1b7744f48a1acdd2a4ae0 < a5ac87aabdedd31e832b40466605e83f428136aa
Linux Linux 5d4f98a28c7d334091c1b7744f48a1acdd2a4ae0 < 6ad4caadc6343c3d7987bf3211f15d66135c4c42
Linux Linux 5d4f98a28c7d334091c1b7744f48a1acdd2a4ae0 < 5549743e11c06da23cfa7712a994b9f1e69064c6
Linux Linux 5d4f98a28c7d334091c1b7744f48a1acdd2a4ae0 < c7d1d4ff56744074e005771aff193b927392d51f
Linux Linux 2.6.31
linux linux_kernel 2.6.31 – 6.19.6

Bug Bounty Relevance

36 / 100
✓ Low complexity
✓ No user interaction

CVSS Score

5.5 / 10.0 v3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS — Exploitation Probability

0.12%
Raw Score 0.001230
Percentile 2.0%
Date 2026-11-01

EPSS Trend

2026-11-01
0.00123
2026-10-31
0.00123
2026-10-30
0.00122
2026-10-29
0.00122

Intelligence Sources

mitre ref →
nvd ref →