SB20261007120 - Incomplete cleanup in Linux kernel btrfs

Description

This security bulletin contains information about 1 vulnerability.

1) Incomplete cleanup (CVE-ID: CVE-2026-98244)

CWE-ID: CWE-459 - Incomplete cleanup

CVSSv4: 4.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N]

The vulnerability allows a local user to cause delayed reference processing to be skipped.

The vulnerability exists due to incomplete cleanup of the free space tree creation state in btrfs_rebuild_free_space_tree() when rebuilding the free space tree fails. A local user can trigger a free space tree rebuild that encounters an error to cause delayed reference processing to be skipped.

The transaction restart failure path can leave the affected filesystem live.

Remediation

Install update from vendor's website.

References

• https://git.kernel.org/stable/c/3565893cc72cdf6b795cf6a33e7ff9605322334d
• https://git.kernel.org/stable/c/a32bedab8ece9d1f90a1476a5b486a1804dc78ba
• https://git.kernel.org/stable/c/b1df2997d0cd2be7bef7b4ab64ccfd1019dedc81