{"schema":"threatline.record/2","record":{"id":"CVE-2026-93798","aliases":[],"summary":"btrfs: fix reloc root cleanup in merge_reloc_roots()","details":"In the Linux kernel, the following vulnerability has been resolved:\n\nbtrfs: fix reloc root cleanup in merge_reloc_roots()\n\nIf the root we got has zero root refs in its root item, we are resetting\nthe root's ->reloc_root without using barriers like we do everywhere else.\nSashiko complained about this while reviewing another patch, and it's\ncorrect (see the Link tag below).\n\nAlso, we should not clear BTRFS_ROOT_DEAD_RELOC_TREE from the root unless\nthe root points to the reloc root we have.\n\nFix this by using clear_reloc_root(), which issues the memory barrier\nafter setting the root's ->reloc_root to NULL and before clearing the bit\nBTRFS_ROOT_DEAD_RELOC_TREE from the root.","categories":["Operating systems"],"product":"Linux","vendor":"Linux","ecosystem":null,"affected_ranges":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-93798","source_modified_at":"2026-10-03T10:57:32.550Z","fetched_at":"2026-10-23T18:52:38.922436Z","product":"Linux","vendor":"Linux","versions":[{"version":"1dae7e0e58b484eaa43d530f211098fdeeb0f404","lessThan":"29531470b1bf1e8bd2df4941fe913106edbca615","status":"affected","versionType":"git"},{"version":"1dae7e0e58b484eaa43d530f211098fdeeb0f404","lessThan":"415f8665a969d3c906e4fd7c90fcbb4b357886f6","status":"affected","versionType":"git"},{"version":"1dae7e0e58b484eaa43d530f211098fdeeb0f404","lessThan":"ee695a968aa73b1e67ccbf2133dc0e54381d32b2","status":"affected","versionType":"git"},{"version":"1dae7e0e58b484eaa43d530f211098fdeeb0f404","lessThan":"0bc25f0a2d1b3e0a691431c4d7aef36afcd527c5","status":"affected","versionType":"git"},{"version":"1dae7e0e58b484eaa43d530f211098fdeeb0f404","lessThan":"ab48583aa9948205ff9a6470e23dbff74c565e24","status":"affected","versionType":"git"},{"version":"1dae7e0e58b484eaa43d530f211098fdeeb0f404","lessThan":"63d6b1f04cd91c825329712aa526215ffa5d11ca","status":"affected","versionType":"git"},{"version":"1dae7e0e58b484eaa43d530f211098fdeeb0f404","lessThan":"b78fe9563e2d5ae47805f1e5dc722c91fd30e1f8","status":"affected","versionType":"git"},{"version":"ee08663380ffd5a45a1c87580fbc305e8413c235","status":"affected","versionType":"git"},{"version":"33823378ff2b510fd7b566f25bb18438aeb9b23b","status":"affected","versionType":"git"},{"version":"5.4.54","lessThan":"5.5","status":"affected","versionType":"semver"},{"version":"5.7.11","lessThan":"5.8","status":"affected","versionType":"semver"}],"defaultStatus":"unaffected"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-93798","source_modified_at":"2026-10-03T10:57:32.550Z","fetched_at":"2026-10-23T18:52:38.922436Z","product":"Linux","vendor":"Linux","versions":[{"version":"5.8","status":"affected"},{"version":"0","lessThan":"5.8","status":"unaffected","versionType":"semver"},{"version":"5.10.271","lessThanOrEqual":"5.10.*","status":"unaffected","versionType":"semver"},{"version":"5.15.222","lessThanOrEqual":"5.15.*","status":"unaffected","versionType":"semver"},{"version":"6.1.189","lessThanOrEqual":"6.1.*","status":"unaffected","versionType":"semver"},{"version":"6.6.158","lessThanOrEqual":"6.6.*","status":"unaffected","versionType":"semver"},{"version":"6.12.111","lessThanOrEqual":"6.12.*","status":"unaffected","versionType":"semver"},{"version":"6.18.53","lessThanOrEqual":"6.18.*","status":"unaffected","versionType":"semver"},{"version":"7.2","lessThanOrEqual":"*","status":"unaffected","versionType":"original_commit_for_fix"}],"defaultStatus":"affected"}],"fixed_versions":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-93798","source_modified_at":"2026-10-03T10:57:32.550Z","fetched_at":"2026-10-23T18:52:38.922436Z","package":{"name":"Linux","ecosystem":null},"version":"29531470b1bf1e8bd2df4941fe913106edbca615","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-93798","source_modified_at":"2026-10-03T10:57:32.550Z","fetched_at":"2026-10-23T18:52:38.922436Z","package":{"name":"Linux","ecosystem":null},"version":"415f8665a969d3c906e4fd7c90fcbb4b357886f6","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-93798","source_modified_at":"2026-10-03T10:57:32.550Z","fetched_at":"2026-10-23T18:52:38.922436Z","package":{"name":"Linux","ecosystem":null},"version":"0bc25f0a2d1b3e0a691431c4d7aef36afcd527c5","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-93798","source_modified_at":"2026-10-03T10:57:32.550Z","fetched_at":"2026-10-23T18:52:38.922436Z","package":{"name":"Linux","ecosystem":null},"version":"63d6b1f04cd91c825329712aa526215ffa5d11ca","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-93798","source_modified_at":"2026-10-03T10:57:32.550Z","fetched_at":"2026-10-23T18:52:38.922436Z","package":{"name":"Linux","ecosystem":null},"version":"5.5","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-93798","source_modified_at":"2026-10-03T10:57:32.550Z","fetched_at":"2026-10-23T18:52:38.922436Z","package":{"name":"Linux","ecosystem":null},"version":"5.8","basis":"first unaffected version stated in the CVE record"}],"cvss":7.8,"severity":"High","kev":{"listed":false},"epss":{"probability":0.00129,"percentile":0.02313,"score_date":"2026-10-23"},"published_at":"2026-09-24T16:02:31.291Z","modified_at":"2026-10-03T10:57:32.550Z","provenance":[{"source":"CVE List","url":"https://www.cve.org/CVERecord?id=CVE-2026-93798","fetched_at":"2026-10-23T18:52:38.922436Z","source_modified_at":"2026-10-03T10:57:32.550Z"},{"source":"EPSS","url":"https://api.first.org/data/v1/epss?cve=CVE-2026-93798","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2026-10-23"}],"sources":["CVE List","EPSS"],"references":[{"source":"CVE List","url":"https://git.kernel.org/stable/c/29531470b1bf1e8bd2df4941fe913106edbca615"},{"source":"CVE List","url":"https://git.kernel.org/stable/c/415f8665a969d3c906e4fd7c90fcbb4b357886f6"},{"source":"CVE List","url":"https://git.kernel.org/stable/c/ee695a968aa73b1e67ccbf2133dc0e54381d32b2"},{"source":"CVE List","url":"https://git.kernel.org/stable/c/0bc25f0a2d1b3e0a691431c4d7aef36afcd527c5"},{"source":"CVE List","url":"https://git.kernel.org/stable/c/ab48583aa9948205ff9a6470e23dbff74c565e24"},{"source":"CVE List","url":"https://git.kernel.org/stable/c/63d6b1f04cd91c825329712aa526215ffa5d11ca"},{"source":"CVE List","url":"https://git.kernel.org/stable/c/b78fe9563e2d5ae47805f1e5dc722c91fd30e1f8"}],"locations":[],"motoko_assessment":{"status":"requires_architecture_review","automatic_remediation":false},"cve_state":"PUBLISHED","cvss_source":"CVE List","classification":{"method":"product-first software-layer rules","rules_version":"2.1","matched_on":"product","confidence":"heuristic","reviewed":false},"change_timestamp":"2026-10-03T10:57:32.550Z","content_hash":"14736fb93f6ade2a1068ca623150e2767205d50034de185611adc71e97d608f9"}}