CVE-2026-98090
Received Received - Intake

Btrfs Active Device Pointer Corruption on Sprout Failure

Publication date: 2026-09-25

Last updated on: 2026-09-25

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: btrfs: restore active device pointers after failed sprout btrfs_init_new_device() switches latest_dev and possibly s_bdev from the seed device to the new sprout device before creating the first writable chunks. If chunk creation or the subsequent sprout setup fails, the error path releases the new device without switching those pointers back. btrfs_show_devname() can then dereference the freed latest_dev and crash. Restore the active device pointers to the latest seed device before removing and releasing the failed sprout device.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-25
Last Modified
2026-09-25
Generated
2026-09-25
AI Q&A
2026-09-25
EPSS Evaluated
N/A
NVD
CVE-2026-98090
EUVD
EUVD-2026-86920

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
linux_kernel btrfs *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is a Linux kernel vulnerability in the Btrfs filesystem. It occurs when a new device is added to a Btrfs filesystem but fails during setup. The system incorrectly keeps pointers to the failed device, which can later cause a crash when trying to access filesystem information.

Detection Guidance

This vulnerability is specific to the Linux kernel's btrfs filesystem and does not have network-based detection methods. To detect it, check kernel logs for crashes related to btrfs_show_devname() or device pointer issues after a failed btrfs sprout operation. Use commands like dmesg | grep -i btrfs or journalctl -k | grep -i btrfs to review kernel logs.

Impact Analysis

If exploited, this could lead to system crashes when accessing Btrfs filesystems, potentially causing data loss or denial of service. Users running systems with Btrfs and removable storage may be affected.

Mitigation Strategies

Apply the latest Linux kernel update that includes the fix for this vulnerability. Avoid using btrfs sprout operations until the update is applied. If you cannot update immediately, consider temporarily disabling btrfs or using alternative filesystems until the patch is installed.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-98090. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart