CVE-2026-98082

Analyzed Analyzed - Analysis Complete

Memory Leak in Linux Kernel Btrfs Subsystem

Publication date: 2026-09-25

Last updated on: 2026-10-06

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix the possible bioc_list memory leak during error There are two possible ways to leak bioc memory on btrfs_ordered_extent::bioc_list: - An error occurred for btrfs_insert_one_raid_extent() Then the function btrfs_insert_raid_extent() immediately return without freeing any bioc in the bioc_list. - An ordered extent hit an IO error In that case the ordered extent will have BTRFS_ORDERED_IOERR set, and skip the call on btrfs_insert_raid_extent() completely. Fix the problem by: - Introduce a new helper, btrfs_cleanup_ordered_bioc_list() Which will remove all bioc from the bioc_list, and release the bioc. - Call the above helper for btrfs_insert_raid_extent() So that the cleanup helper is always called no matter what. - Call the above helper for btrfs_finish_one_ordered() This is called just before the final release on the ordered extent. This was reported by Sashiko when reviewing another patch.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-25

Last Modified

2026-10-06

Generated

2026-10-15

AI Q&A

2026-09-25

EPSS Evaluated

2026-10-14

NVD

CVE-2026-98082

EUVD

EUVD-2026-86912

Affected Vendors & Products

Vendor	Product	Version / Range
linux	linux_kernel	From 6.19 (inc) to 7.2.7 (exc)
linux	linux_kernel	7.3
linux	linux_kernel	From 6.13 (inc) to 6.18.53 (exc)
linux	linux_kernel	From 6.7 (inc) to 6.12.111 (exc)
linux	linux_kernel	From 6.6.130 (inc) to 6.6.158 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-401	The product does not sufficiently track and release allocated memory after it has been used, making the memory unavailable for reallocation and reuse.

Attack-Flow Graph

Executive Summary

This vulnerability in the Linux kernel involves a memory leak in the btrfs file system. It occurs when errors happen during operations involving btrfs_ordered_extent::bioc_list, causing memory allocated for bioc structures to not be freed properly. The issue arises in two scenarios: during errors in btrfs_insert_one_raid_extent() or when an ordered extent encounters an IO error. The fix introduces a helper function to clean up bioc memory to prevent leaks.

Detection Guidance

This vulnerability is specific to the Linux kernel's btrfs filesystem and involves memory leaks in bioc_list during error conditions. Detection requires checking kernel logs for btrfs-related errors or memory leaks. Use commands like dmesg | grep -i btrfs or journalctl -k | grep -i btrfs to inspect kernel logs for anomalies.

Impact Analysis

This vulnerability could lead to memory exhaustion on systems using the btrfs file system. Over time, unaddressed memory leaks may cause system performance degradation, crashes, or instability due to running out of available memory. Users relying on btrfs for storage may experience unexpected behavior or downtime.

Compliance Impact

This vulnerability does not directly affect compliance with standards like GDPR or HIPAA. It is a memory leak in the Linux kernel's btrfs filesystem during error conditions, which could lead to resource exhaustion but does not involve data exposure or privacy violations.

Mitigation Strategies

Update your Linux kernel to the latest stable version that includes the fix for this vulnerability. Monitor kernel logs for btrfs-related errors after updating. If you cannot update immediately, consider disabling the btrfs filesystem if not in use to reduce exposure.

Hi! I’m here to help you understand CVE-2026-98082. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70