CVE-2026-98091
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2026
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
btrfs: detach failed sprout device from transaction update list
In the Linux kernel, the following vulnerability has been resolved: btrfs: detach failed sprout device from transaction update list When creating the first metadata chunk for a sprout filesystem, create_chunk() adds the new device to the transaction dev_update_list through device->post_commit_list. If the subsequent system chunk creation fails, btrfs_init_new_device() aborts the transaction and releases the device while post_commit_list is still linked. This triggers a warning in btrfs_free_device() and leaves the transaction list referencing freed memory. Detach the device while holding chunk_mutex before releasing it.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Linux
- Vendor
- Linux
- Product
- Linux
- Platforms
- Unknown
- Default status
unaffected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| bbbf7243d62d8be73b7ef60721c127b36b2d523e | affected | git | 2a57fb1d5ce8f316b81bbb60e6df245ebc816ffc | Unavailable | None listed |
| bbbf7243d62d8be73b7ef60721c127b36b2d523e | affected | git | 86eff3052054e8f3b059b2d5845b6dcca021f20c | Unavailable | None listed |
| bbbf7243d62d8be73b7ef60721c127b36b2d523e | affected | git | 63bfa52eb3289517aa82cb90e1189385873aae21 | Unavailable | None listed |
| bbbf7243d62d8be73b7ef60721c127b36b2d523e | affected | git | 7fe9dfbca43464baa8f050447a4837587b18adec | Unavailable | None listed |
| bbbf7243d62d8be73b7ef60721c127b36b2d523e | affected | git | e9e7e37afa85db770e6084360b21a21a8b3a583f | Unavailable | None listed |
| bbbf7243d62d8be73b7ef60721c127b36b2d523e | affected | git | 8b001df2b37ca022f710f3254fbb0bcd6d9e1bed | Unavailable | None listed |
| bbbf7243d62d8be73b7ef60721c127b36b2d523e | affected | git | 0ea6814bc0ff7cff443241bd34db9f0f828f3190 | Unavailable | None listed |
| bbbf7243d62d8be73b7ef60721c127b36b2d523e | affected | git | c93b3c43df561cd9f592cee20ae058b563f9e5b6 | Unavailable | None listed |
Linux
- Vendor
- Linux
- Product
- Linux
- Platforms
- Unknown
- Default status
affected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 5.2 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 0 | unaffected | semver | 5.2 | Unavailable | None listed |
| 5.10.271 | unaffected | semver | Unavailable | 5.10.* | None listed |
| 5.15.222 | unaffected | semver | Unavailable | 5.15.* | None listed |
| 6.1.189 | unaffected | semver | Unavailable | 6.1.* | None listed |
| 6.6.158 | unaffected | semver | Unavailable | 6.6.* | None listed |
| 6.12.111 | unaffected | semver | Unavailable | 6.12.* | None listed |
| 6.18.53 | unaffected | semver | Unavailable | 6.18.* | None listed |
| 7.2.7 | unaffected | semver | Unavailable | 7.2.* | None listed |
| 7.3 | unaffected | original_commit_for_fix | Unavailable | * | None listed |