Not yet scoredPublished Oct 6, 2026

CVE-2026-98244btrfs: clear free space tree creation state on rebuild failure

Updated under an hour ago (2026-10-19 08:00 UTC)

Does this affect you?

It affects Linux. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: btrfs: clear free space tree creation state on rebuild failure btrfs_rebuild_free_space_tree() sets BTRFS_FS_CREATING_FREE_SPACE_TREE before rebuilding the free space tree. Several error paths return without clearing this flag. The transaction restart failure path can leave the flag set on a live filesystem, causing delayed reference processing to be skipped. Clear it on all free space tree rebuild failure paths. Keep BTRFS_FS_FREE_SPACE_TREE_UNTRUSTED set, since a failed rebuild leaves the free space tree untrusted. Callers must fall back to extent-tree caching.

CVSS: Not yet scored
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Received
Record last updated: Oct 6, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from 882af9f13e830c0a4ef696bb72cd5998a5067a93 before a32bedab8ece9d1f90a1476a5b486a1804dc78ba; from 882af9f13e830c0a4ef696bb72cd5998a5067a93 before b1df2997d0cd2be7bef7b4ab64ccfd1019dedc81; from 882af9f13e830c0a4ef696bb72cd5998a5067a93 before 3565893cc72cdf6b795cf6a33e7ff9605322334d	CNA record

References

https://git.kernel.org/stable/c/a32bedab8ece9d1f90a1476a5b486a1804dc78ba
https://git.kernel.org/stable/c/b1df2997d0cd2be7bef7b4ab64ccfd1019dedc81
https://git.kernel.org/stable/c/3565893cc72cdf6b795cf6a33e7ff9605322334d

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.