Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2026-98090

btrfs: restore active device pointers after failed sprout

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: btrfs: restore active device pointers after failed sprout btrfs_init_new_device() switches latest_dev and possibly s_bdev from the seed device to the new sprout device before creating the first writable chunks. If chunk creation or the subsequent sprout setup fails, the error path releases the new device without switching those pointers back. btrfs_show_devname() can then dereference the freed latest_dev and crash. Restore the active device pointers to the latest seed device before removing and releasing the failed sprout device.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • a6e7e218a4d6488d56727a7d9aee1b7e78c0c485 to < 46863a9f93186e620c70584f91c8d5d95da83effaffected
  • b7cb29e666fe79dda5dbe5f57fb7c92413bf161c to < 49179f13c04735c55fd0f43b03696c015b067137affected
  • b7cb29e666fe79dda5dbe5f57fb7c92413bf161c to < 0a0ee38ad6324ac1603079bb785f784191576bd5affected
  • b7cb29e666fe79dda5dbe5f57fb7c92413bf161c to < 2ee5c4bc11007c51f63f0c1be5d3f07f2b404ff7affected
  • b7cb29e666fe79dda5dbe5f57fb7c92413bf161c to < e127ac29a52134d0f4cba39d38e4b375deb3d1aaaffected
  • b7cb29e666fe79dda5dbe5f57fb7c92413bf161c to < b79b4b29003690acfade8241998fc0104ef9c84caffected
  • b7cb29e666fe79dda5dbe5f57fb7c92413bf161c to < e0b54613aabeb8e9da597f23b90c6a03d0981986affected
  • 5.15.11 to < 5.15.222affected

Linux Linux

Default version status: affected

  • 5.16affected
  • 0 to < 5.16unaffected
  • 5.15.222 to ≤ 5.15.*unaffected
  • 6.1.189 to ≤ 6.1.*unaffected
  • 6.6.158 to ≤ 6.6.*unaffected
  • 6.12.111 to ≤ 6.12.*unaffected
  • 6.18.53 to ≤ 6.18.*unaffected
  • 7.2.7 to ≤ 7.2.*unaffected
  • 7.3 to ≤ *unaffected

References