CVE-2026-98961: Linux

Описание

Оригинално описание

In the Linux kernel, the following vulnerability has been resolved: btrfs: unlock inode and extent in caller when io_uring read extent fails btrfs_uring_read_extent() runs only after btrfs_encoded_read() has taken the inode shared lock and the extent lock. On failure it used to unlock in out_fail, and a pages-array allocation failure returned -ENOMEM without unlocking at all. Unlock in the caller instead on all failure returns, matching the copy_to_user() error path. The deferred -EIOCBQUEUED path still unlocks in btrfs_uring_read_finished().

Засегнати продукти

• Linux Linux: 34310c442e175f286b4c06ab5caa4e0b267ea31c преди 2797eb38773a96914ccedeec71eb2144645400b2; 34310c442e175f286b4c06ab5caa4e0b267ea31c преди ada1fc725a4db407294ae90a0d40ef1c46f457f2; 34310c442e175f286b4c06ab5caa4e0b267ea31c преди b6e8add5d79d1f6f819a054c833bab452bd7365d
• Linux Linux: 6.13; преди 6.13; 6.18.57 до 6.18.*; 7.2.11 до 7.2.*; от 7.3 нататък

История

Други уязвимости в Linux Linux

• 8.1CVE-2026-99270
• 7.8CVE-2026-99269
• CVE-2026-99268
• CVE-2026-99266
• CVE-2026-99267

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2026-98961
• https://nvd.nist.gov/vuln/detail/CVE-2026-98961
• https://git.kernel.org/stable/c/2797eb38773a96914ccedeec71eb2144645400b2
• https://git.kernel.org/stable/c/ada1fc725a4db407294ae90a0d40ef1c46f457f2
• https://git.kernel.org/stable/c/b6e8add5d79d1f6f819a054c833bab452bd7365d