CVE-2026-98091

The Linux kernel contains a vulnerability in btrfs where a failed sprout filesystem setup leads to a use-after-free condition. Specifically, when create_chunk() adds a new device to the dev_update_list via device->post_commit_list, a subsequent failure in system chunk creation causes btrfs_ini...

EUVD-2026-86920

In the Linux kernel, the following vulnerability has been resolved: btrfs: restore active device pointers after failed sprout btrfsinitnewdevice switches latestdev and possibly sbdev from the seed device to the new sprout device before creating the first writable chunks. If chunk creation or the...

CVE-2026-98090

The Linux kernel contains a vulnerability in the btrfs filesystem where btrfs_init_new_device() switches the latest_dev and s_bdev pointers from a seed device to a new sprout device. If chunk creation or sprout setup fails, the error path releases the new device without restoring these pointers. ...