Skip to main content
CVE-2026-43338VulnerabilityPublished Updated

Microsoft · btrfs: reserve enough transaction items for qgroup ioctls

Affects MicrosoftSource GCVE Database

0
Compare
Authoritative record:CVE-2026-43338· Medium

Not known to be exploited · fixed in f9a4e3015db1aeafbef407650eb8555445ca943e : update Microsoft when convenient.

Data as of 30 Oct 2026, 11:52 UTC

Severity
Medium

Rated by Threat Radar · No CVSS score from NVD or the CNA

Thin evidence

One scorer or none
EPSS
0.1% chance of exploitation in 30 days – higher than 1% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.
Patch
Available – fixed in f9a4e3015db1aeafbef407650eb8555445ca943e, cf930a651eef6f8d915bf0ccd60c2045974f870c, bb6eb33c908edbbb4d92abdc0c6c87f21b4952e8 +3

Exploitation evidence

  1. Disclosed: evidence found.

    CVE published 8 May 2026

  2. Detectable: no evidence on record.

    No public nuclei template indexed

  3. Weaponized: no evidence on record.

    No public exploit code indexed in Metasploit or Exploit-DB

  4. Exploited in the wild: no evidence on record.

    Not in CISA KEV and no source reports exploitation

  5. Observed by OffSeq Mirage: no evidence on record.

    No attack traffic recorded by OffSeq Mirage sensors

A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 30 Oct 2026.

What to do

Upgrade to a fixed release listed under Affected software.

Affected software

ProductAffectedFixed in
LinuxLinuxAffected
  • ≥ 5d13a37bd5327220e13329943d1228acfbe5934a, < f9a4e3015db1aeafbef407650eb8555445ca943e
Fixed in
  • f9a4e3015db1aeafbef407650eb8555445ca943e
LinuxLinuxAffected
  • ≥ 5d13a37bd5327220e13329943d1228acfbe5934a, < cf930a651eef6f8d915bf0ccd60c2045974f870c
Fixed in
  • cf930a651eef6f8d915bf0ccd60c2045974f870c
LinuxLinuxAffected
  • ≥ 5d13a37bd5327220e13329943d1228acfbe5934a, < bb6eb33c908edbbb4d92abdc0c6c87f21b4952e8
Fixed in
  • bb6eb33c908edbbb4d92abdc0c6c87f21b4952e8
LinuxLinuxAffected
  • ≥ 5d13a37bd5327220e13329943d1228acfbe5934a, < 320942ce316a17b104b5814db55e42a42c2442cf
Fixed in
  • 320942ce316a17b104b5814db55e42a42c2442cf
LinuxLinuxAffected
  • ≥ 5d13a37bd5327220e13329943d1228acfbe5934a, < 386f5e16a383101a68e195c806b4eedb233cd1d3
Fixed in
  • 386f5e16a383101a68e195c806b4eedb233cd1d3
LinuxLinuxAffected
  • ≥ 5d13a37bd5327220e13329943d1228acfbe5934a, < 4ccd563214419cef14a54df9333ed655484e9dc8
Fixed in
  • 4ccd563214419cef14a54df9333ed655484e9dc8

Description

CVE-2026-43338 is a vulnerability related to the btrfs filesystem component in Microsoft software version 3.0. The issue involves reserving enough transaction items for qgroup ioctls. No detailed technical information or CVSS score is provided.

References

Community reviews

Loading reviews…