SB20260928113 - Operation on a Resource after Expiration or Release in Linux kernel btrfs

Description

This security bulletin contains information about 1 vulnerability.

1) Operation on a Resource after Expiration or Release (CVE-ID: CVE-2026-98080)

CWE-ID: CWE-672 - Operation on a Resource after Expiration or Release

CVSSv4: 5.8 [CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a local user to cause filesystem metadata corruption and force the filesystem read-only.

The vulnerability exists due to improper reloc root creation in the Btrfs qgroup snapshot accounting path when accounting snapshots during block-group relocation. A local user can perform Btrfs operations that account snapshots during relocation to cause filesystem metadata corruption and force the filesystem read-only.

The issue occurs on Btrfs filesystems with quotas enabled.

Remediation

Install update from vendor's website.

References

• https://git.kernel.org/stable/c/203cbfb4fba590bd9b08bd36fa6d05b5d28923bf
• https://git.kernel.org/stable/c/b5d5ab5a715001dd937c920ef8c5688fd4999ba1
• https://git.kernel.org/stable/c/c4c78768d1a8ceb713693cc5524acbe984c31f3c
• https://git.kernel.org/stable/c/cacf35832292997018837e484283f95a9301ebf5