All vulnerabilities
CVE-2026-98244

Linux: btrfs: clear free space tree creation state on rebuild failure

Linux LinuxOperating systems
Open in ThreatlineRecord JSON
CVSS
NoneNot scored
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.17%Chance of exploitation activity in the next 30 days, higher than 5% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed in3565893cc72cdf6b795cf6a33e7ff9605322334dFixed versionCVE List
Published6 Oct 2026Updated 19 Oct 2026CVE List

What fixes it

  • 3565893cc72cdf6b795cf6a33e7ff9605322334dLinuxCVE List

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Description

In the Linux kernel, the following vulnerability has been resolved:

btrfs: clear free space tree creation state on rebuild failure

btrfs_rebuild_free_space_tree() sets BTRFS_FS_CREATING_FREE_SPACE_TREE before rebuilding the free space tree. Several error paths return without clearing this flag.

The transaction restart failure path can leave the flag set on a live filesystem, causing delayed reference processing to be skipped. Clear it on all free space tree rebuild failure paths. Keep BTRFS_FS_FREE_SPACE_TREE_UNTRUSTED set, since a failed rebuild leaves the free space tree untrusted. Callers must fall back to extent-tree caching.

Text from CVE List

Affected versions 8

  • Linuxaffected: 882af9f13e830c0a4ef696bb72cd5998a5067a93 before a32bedab8ece9d1f90a1476a5b486a1804dc78baCVE List
  • Linuxaffected: 882af9f13e830c0a4ef696bb72cd5998a5067a93 before b1df2997d0cd2be7bef7b4ab64ccfd1019dedc81CVE List
  • Linuxaffected: 882af9f13e830c0a4ef696bb72cd5998a5067a93 before 3565893cc72cdf6b795cf6a33e7ff9605322334dCVE List
  • Linuxaffected: 6.14CVE List
  • Linuxunaffected: all versions before 6.14CVE List
  • Linuxunaffected: 6.18.54 through 6.18.*CVE List
  • Linuxunaffected: 7.2.8 through 7.2.*CVE List
  • Linuxunaffected: 7.3CVE List

References 3