CVE-2026-98962
btrfs: free iov when btrfs_uring_read_extent() fails
Fetching some sources has been requested. Reload in about a minute to see them.
CVSS v3.1 (listed by NVD)
—
Not scored
CVSS v4.0 (listed by NVD)
—
Not scored
CVSS (listed by CVE.org)
—
Not scored
EPSS exploit probability
0.2%
Percentile 10.1%
as of 2026-10-24
CISA KEV
—
Not listed
Description
NVD
In the Linux kernel, the following vulnerability has been resolved: btrfs: free iov when btrfs_uring_read_extent() fails After btrfs_uring_read_extent(), the caller always jumped to out_acct. That skips kfree(data->iov), which is only correct for -EIOCBQUEUED where the deferred path owns the iov. On failure, fall through to out_free instead.
Affected products and packages
CNA (CVE.org)
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux | affected: 34310c442e175f286b4c06ab5caa4e0b267ea31c … < 7a3addbdc5ad1fd80541a6a4ff4e06cd1331530a affected: 34310c442e175f286b4c06ab5caa4e0b267ea31c … < 578ef517142420cf9d36b364ad4b3490b85469fb affected: 34310c442e175f286b4c06ab5caa4e0b267ea31c … < a8ea92830b3e0e163d4e829bdcb17ca83c0f951c default: unaffected |
| Linux | Linux | affected: 6.13 unaffected: 0 … < 6.13 unaffected: 6.18.57 … <= 6.18.* unaffected: 7.2.11 … <= 7.2.* unaffected: 7.3 … <= * default: affected |
Open-source packages (GitHub Advisory / OSV)
CVE-2026-98962
OSV
btrfs: free iov when btrfs_uring_read_extent() fails
| Ecosystem | Package | Affected versions | Fixed in |
|---|---|---|---|
| >= 34310c442e175f286b4c06ab5caa4e0b267ea31c, < 7a3addbdc5ad1fd80541a6a4ff4e06cd1331530a; < 578ef517142420cf9d36b364ad4b3490b85469fb; < a8ea92830b3e0e163d4e829bdcb17ca83c0f951c | 7a3addbdc5ad1fd80541a6a4ff4e06cd1331530a, 578ef517142420cf9d36b364ad4b3490b85469fb, a8ea92830b3e0e163d4e829bdcb17ca83c0f951c | ||
| Linux | Kernel | >= 6.13.0, < 6.18.57; >= 6.19.0, < 7.2.11 | 6.18.57, 7.2.11 |
Linux distribution status
References (6)
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git OSV
- https://git.kernel.org/stable/c/578ef517142420cf9d36b364ad4b3490b85469fb NVD, CNA, OSV
- https://git.kernel.org/stable/c/7a3addbdc5ad1fd80541a6a4ff4e06cd1331530a NVD, CNA, OSV
- https://git.kernel.org/stable/c/a8ea92830b3e0e163d4e829bdcb17ca83c0f951c NVD, CNA, OSV
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/98xxx/CVE-2026-98962.json OSV
- https://nvd.nist.gov/vuln/detail/CVE-2026-98962 OSV