CVE-2026-98960
btrfs: don't stash io_uring encoded data across -EAGAIN
Fetching some sources has been requested. Reload in about a minute to see them.
Description
In the Linux kernel, the following vulnerability has been resolved: btrfs: don't stash io_uring encoded data across -EAGAIN Returning -EAGAIN while leaving btrfs_uring_encoded_data in the cmd PDU leaks if the request is cancelled or the ring exits before reissue. io_uring does not free driver PDU allocations on cleanup. Write: io_queue_sqe() always issues with IO_URING_F_NONBLOCK first, so return -EAGAIN before allocating and free data on every exit. Read: free on nowait -EAGAIN too; only -EIOCBQUEUED keeps the allocation for btrfs_uring_read_finished().
Affected products and packages
CNA (CVE.org)
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux | affected: 34310c442e175f286b4c06ab5caa4e0b267ea31c … < 4d9c1e0a7fb2cfb1cc924acafc194d2c15c3e83e affected: 34310c442e175f286b4c06ab5caa4e0b267ea31c … < 51562a8cb11628d3a5e105b4c347ec5473e5745f default: unaffected |
| Linux | Linux | affected: 6.13 unaffected: 0 … < 6.13 unaffected: 7.2.11 … <= 7.2.* unaffected: 7.3 … <= * default: affected |
Open-source packages (GitHub Advisory / OSV)
btrfs: don't stash io_uring encoded data across -EAGAIN
| Ecosystem | Package | Affected versions | Fixed in |
|---|---|---|---|
| >= 34310c442e175f286b4c06ab5caa4e0b267ea31c, < 4d9c1e0a7fb2cfb1cc924acafc194d2c15c3e83e; < 51562a8cb11628d3a5e105b4c347ec5473e5745f | 4d9c1e0a7fb2cfb1cc924acafc194d2c15c3e83e, 51562a8cb11628d3a5e105b4c347ec5473e5745f | ||
| Linux | Kernel | >= 6.13.0, < 7.2.11 | 7.2.11 |
Linux distribution status
References (5)
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git OSV
- https://git.kernel.org/stable/c/4d9c1e0a7fb2cfb1cc924acafc194d2c15c3e83e NVD, CNA, OSV
- https://git.kernel.org/stable/c/51562a8cb11628d3a5e105b4c347ec5473e5745f NVD, CNA, OSV
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/98xxx/CVE-2026-98960.json OSV
- https://nvd.nist.gov/vuln/detail/CVE-2026-98960 OSV