Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2026-98963

btrfs: always return -EIOCBQUEUED after btrfs_uring_read_extent_endio

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: btrfs: always return -EIOCBQUEUED after btrfs_uring_read_extent_endio If all bios finish before btrfs_encoded_read_regular_fill_pages() returns, it calls btrfs_uring_read_extent_endio() and previously returned the I/O status. A negative errno then made btrfs_uring_read_extent() unlock and free while btrfs_uring_read_finished() did the same again. Return -EIOCBQUEUED so only the deferred path cleans up.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 34310c442e175f286b4c06ab5caa4e0b267ea31c to < 033dda5b321f01661de518a8d5c8607ae8675b14affected
  • 34310c442e175f286b4c06ab5caa4e0b267ea31c to < a449433b0e3d4a3715d0bbee078f8c603f03c9f6affected
  • 34310c442e175f286b4c06ab5caa4e0b267ea31c to < 80a8dbb30d2b00b9c671b02bd73f700f6d20100faffected

Linux Linux

Default version status: affected

  • 6.13affected
  • 0 to < 6.13unaffected
  • 6.18.57 to ≤ 6.18.*unaffected
  • 7.2.11 to ≤ 7.2.*unaffected
  • 7.3 to ≤ *unaffected

References