CVE-2026-90259btrfs: qgroup: fix a wrong length calculation in qgroup_free_reserved_data()
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: btrfs: qgroup: fix a wrong length calculation in qgroup_free_reserved_data() In that function, we round down the start position and round up the ending position. But during the calculation of @len, we use "round_up(start + len, sectorsize)", which is the rounded up end position, not the rounded up length. Which results a much larger length, and later we are still using "start + len", which is completely incorrect. Fix it by declaring a local @aligned_start and @aligned_len and use them instead.
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Oct 19, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from bc42bda22345efdb5d8b578d1b4df2c6eaa85c58 before e6edde29990af8064b9d12217ec03db231ccd55d; from bc42bda22345efdb5d8b578d1b4df2c6eaa85c58 before c4c136555ff90f1e2921cc42da43daac0ef9985e; from bc42bda22345efdb5d8b578d1b4df2c6eaa85c58 before 9102b179512e11644fb0489ae62010a09afa199c | CNA record |
References
- https://git.kernel.org/stable/c/e6edde29990af8064b9d12217ec03db231ccd55d
- https://git.kernel.org/stable/c/c4c136555ff90f1e2921cc42da43daac0ef9985e
- https://git.kernel.org/stable/c/9102b179512e11644fb0489ae62010a09afa199c
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.