btrfs vulnerability

CVE-2026-43299 is a newly published Linux kernel Btrfs vulnerability, disclosed through kernel.org and surfaced in NVD and Microsoft’s Security Update Guide on May 8, 2026, involving a crash when Btrfs flips a filesystem read-only during pending read-repair work. The flaw is not a flashy...

CVE-2026-43308 is a newly published Linux kernel vulnerability, recorded by NVD on May 8, 2026, covering a Btrfs fix that replaces a kernel-crashing BUG() in run_one_delayed_ref() with ordinary error handling and logging when an unexpected delayed-reference type appears. That sounds almost...

Microsoft’s brief advisory that “Azure Linux includes the implicated open‑source library and is therefore potentially affected” is correct — and useful — but it is not a proof that Azure Linux is the only Microsoft product that could include the vulnerable Btrfs code; other Microsoft‑distributed...