SB20260918397 - Improper Check for Unusual or Exceptional Conditions in Linux kernel btrfs

Description

This security bulletin contains information about 1 vulnerability.

1) Improper Check for Unusual or Exceptional Conditions (CVE-ID: CVE-2026-90266)

CWE-ID: CWE-754 - Improper Check for Unusual or Exceptional Conditions

CVSSv4: 6.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a local user to cause a denial of service.

The vulnerability exists due to improper handling of a transient error condition in Btrfs zoned filesystem block-group reclaim when relocating a block group. A local user can initiate operations that trigger block-group reclaim to cause a denial of service.

The condition occurs when over-committed metadata plus zone-unusable bytes exceeds the usable size of a metadata block group.

Remediation

Install update from vendor's website.

References

• https://git.kernel.org/stable/c/8249dfe46337d599e2087b772a2e32ef9f77282b
• https://git.kernel.org/stable/c/e549093c11a2fff8430df3dfbdb45eb9811a69a5