CVE-2026-98082
Received Received - Intake

Memory Leak in Linux Kernel Btrfs Subsystem

Publication date: 2026-09-25

Last updated on: 2026-09-25

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: btrfs: fix the possible bioc_list memory leak during error There are two possible ways to leak bioc memory on btrfs_ordered_extent::bioc_list: - An error occurred for btrfs_insert_one_raid_extent() Then the function btrfs_insert_raid_extent() immediately return without freeing any bioc in the bioc_list. - An ordered extent hit an IO error In that case the ordered extent will have BTRFS_ORDERED_IOERR set, and skip the call on btrfs_insert_raid_extent() completely. Fix the problem by: - Introduce a new helper, btrfs_cleanup_ordered_bioc_list() Which will remove all bioc from the bioc_list, and release the bioc. - Call the above helper for btrfs_insert_raid_extent() So that the cleanup helper is always called no matter what. - Call the above helper for btrfs_finish_one_ordered() This is called just before the final release on the ordered extent. This was reported by Sashiko when reviewing another patch.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-25
Last Modified
2026-09-25
Generated
2026-09-25
AI Q&A
2026-09-25
EPSS Evaluated
N/A
NVD
CVE-2026-98082
EUVD
EUVD-2026-86912

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
linux_kernel btrfs *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in the Linux kernel involves a memory leak in the btrfs file system. It occurs when errors happen during operations involving btrfs_ordered_extent::bioc_list, causing memory allocated for bioc structures to not be freed properly. The issue arises in two scenarios: during errors in btrfs_insert_one_raid_extent() or when an ordered extent encounters an IO error. The fix introduces a helper function to clean up bioc memory to prevent leaks.

Detection Guidance

This vulnerability is specific to the Linux kernel's btrfs filesystem and involves memory leaks in bioc_list during error conditions. Detection requires checking kernel logs for btrfs-related errors or memory leaks. Use commands like dmesg | grep -i btrfs or journalctl -k | grep -i btrfs to inspect kernel logs for anomalies.

Impact Analysis

This vulnerability could lead to memory exhaustion on systems using the btrfs file system. Over time, unaddressed memory leaks may cause system performance degradation, crashes, or instability due to running out of available memory. Users relying on btrfs for storage may experience unexpected behavior or downtime.

Mitigation Strategies

Update your Linux kernel to the latest stable version that includes the fix for this vulnerability. Monitor kernel logs for btrfs-related errors after updating. If you cannot update immediately, consider disabling the btrfs filesystem if not in use to reduce exposure.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-98082. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart