CVE-2026-98279btrfs: handle lack of space when cleaning up verity items
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: btrfs: handle lack of space when cleaning up verity items When enable_verity() hits the qgroup limit, rollback_verity() needs its own metadata reservation. When the qgroup limit or lack of space refuses the rollback, the whole filesystem is forced read-only even though the qgroup limit was for one subvolume only. Also orphan cleanup at the next mount fails the same way, so the leftover items are never removed: with -EDQUOT the subvolume stays unreachable, and with -ENOSPC on a full filesystem the next read-write mount fails. Start transactions with btrfs_start_transaction_fallback_global_rsv() in btrfs_orphan_cleanup(), drop_verity_items() and rollback_verity(). Those calls only delete items and free the space in the end, so they may use the global reserve and skip the qgroup limit, which avoids -ENOSPC and -EDQUOT.
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Oct 19, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | 146054090b0859b28fc39015c7704ccc3c3a347f builds before 4b7ecabd87dc40998fe7870d7975279649229a3b; from 146054090b0859b28fc39015c7704ccc3c3a347f before efa5780b84f066f419a667f6b9542368b2f62074; 146054090b0859b28fc39015c7704ccc3c3a347f builds before 76bf149cd0298544631e756670b89c399c7acbca | CNA record |
References
- https://git.kernel.org/stable/c/4b7ecabd87dc40998fe7870d7975279649229a3b
- https://git.kernel.org/stable/c/efa5780b84f066f419a667f6b9542368b2f62074
- https://git.kernel.org/stable/c/76bf149cd0298544631e756670b89c399c7acbca
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.