CVE-2026-74722

A flaw was found in the Linux kernel's btrfs filesystem. A local attacker could exploit a memory leak in the btrfsdoencodedwrite function. This occurs because an extent changeset is not properly freed before the function returns. Successful exploitation of this memory leak could lead to a denial ...

CVE-2026-74571

A flaw was found in the Linux kernel's btrfs filesystem. When mounting a btrfs filesystem with the rescue=ibadroots option after corrupting the block group tree root or raid stripe tree root, the system attempts to update the global block reserve. This process dereferences a missing root pointer,...

CVE-2026-74319

A flaw was found in the btrfs zoned filesystem within the Linux kernel. When performing data relocation, the system can enter a deadlock state. This happens because the relocation process waits for a space reservation ticket that cannot be fulfilled, as the relocation itself is the operation...

CVE-2026-74321

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix invalid pointer dereference in btrfsrundelayedrefs In the beginning of the loop, we try to obtain a locked delayed ref head, if 'lockedref' is currently NULL, by calling btrfsselectrefhead, which can return an error...

CVE-2026-68442

A flaw was found in the btrfs filesystem component of the Linux kernel. When an extent map is split, a flag EXTENTFLAGLOGGING is incorrectly propagated to the new split maps. This issue occurs because the flag clearing operation was applied to the wrong variable during the splitting process...

CVE-2026-68450

A flaw was found in the Linux kernel's btrfs filesystem. When the addrelocroot function attempts to insert a duplicate mapping node into the relocroottree, the newly allocated node is not properly freed. This oversight can lead to a memory leak, potentially causing resource exhaustion and a Denia...

CVE-2026-64567

In the Linux kernel, the following vulnerability has been resolved: btrfs: reject free space cache with more entries than pages When loading a v1 free space cache, loadfreespacecache takes numentries and numbitmaps straight from the on-disk btrfsfreespaceheader. That header is stored in the...

dracut security update

107-8.0.1 - Suppress stderr for btrfs subvolume check Orabug: 39059254 - fips: add logic for /boot subvolume on BTRFS Orabug: 36028061 - Skip unneeded FIPS logic on UEK with special FIPS Orabug: 38138800 Orabug: 38709306 - Include correct modprobe into squashfs root Orabug: 38559936 - Ship Oracle...

CVE-2026-53284

A flaw was found in the Linux kernel's Btrfs filesystem. A local user performing specific filesystem operations could trigger an error during the writing of dirty extent buffers. This improper handling of the dirty pages I/O tree can prevent unsubmitted records from being cleaned up, leading to...

PT-2026-52923

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Btrfs file system where the dirty pages io tree is released prematurely. Within the btrfs write and wait transaction function, the system attempts to write dirty...

Astra Linux – Vulnerability in Linux 5.15

The following vulnerability has been resolved in the Linux kernel: btrfs: fixed an issue with the tree mod log handling of reallocated nodes. We have observed the following panics in production: - Kernel bug at fs/btrfs/tree-mod-log.c:677! - Invalid opcode: 0000 1 SMP - RIP:...

CVE-2026-46251

A flaw was found in the Linux kernel's Btrfs filesystem. When the EXTENTTREEV2 incompatibility flag is enabled, the block group tree's dirty list can become corrupted. This corruption occurs because the block group tree is incorrectly added to a commit list while already being tracked, leading to...

CVE-2026-46129

A flaw was found in the Linux kernel, specifically within the btrfs filesystem. This vulnerability, a double free, occurs in the createspaceinfo function's error handling path. When an internal object initialization fails, the system attempts to release memory twice for the same resource. This ca...

CVE-2026-46159

A flaw was found in the btrfs filesystem within the Linux kernel. A Time-of-check to time-of-use TOCTOU race condition in the btrfsioctlspaceinfo function allows a local attacker to exploit a timing window. This occurs when the system counts entries for allocation size and then fills a buffer, bu...

CVE-2026-46160

A flaw was found in the Linux kernel's Btrfs filesystem. This vulnerability occurs when the lastunlinktrans field is not properly updated during directory removal. If a user maintains an open file descriptor to a removed directory and subsequently performs a filesystem synchronization fsync...

UBUNTU-CVE-2026-46129

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix double free in createspaceinfo error path When kobjectinitandadd fails, the call chain is: createspaceinfo - btrfssysfsaddspaceinfotype - kobjectinitandadd - failure - kobjectput&spaceinfo-kobj - spaceinforelease -...

Linux kernel 安全漏洞

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from discontinuous gaps during block allocation in btrfs. This issue causes an EEXIST error in the...

Ubuntu 20.04 LTS : Linux kernel (GCP) vulnerabilities (USN-8297-1)

The remote Ubuntu 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8297-1 advisory. Stonejiajia, Shir Tamari and Sagi Tzadik discovered that the OverlayFS implementation in the Ubuntu Linux kernel did not properly perform permission chec...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: btrfs: The BUGON functions in addnewfreespace have been removed. In addnewfreespace, there were these BUGON functions that were used to handle any failures in adding free space to the in-memory free space cache. Such failures...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: btrfs: fixed a race condition when detecting delalloc ranges during fiemap For fiemap, we recently stopped locking the target extent range for the entire duration of the fiemap call, in order to avoid a deadlock in a scenario whe...