Skip to main content
VulnerabilityPublished Updated

CVE-2026-98244: Linux kernel · btrfs: clear free space tree creation state on rebuild failure

Affects Linux kernelSource CVE Database V5

0

Not known to be exploited · fixed in b1df2997d0cd2be7bef7b4ab64ccfd1019dedc81 : update Linux kernel when convenient.

Data as of 26 Oct 2026, 13:47 UTC

Severity
Medium

Rated Medium by Threat Radar's AI analysis · CVSS not yet scored by NVD

EPSS
0.1% chance of exploitation in 30 days – higher than 5% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.
Patch
Available – fixed in b1df2997d0cd2be7bef7b4ab64ccfd1019dedc81, a32bedab8ece9d1f90a1476a5b486a1804dc78ba, 3565893cc72cdf6b795cf6a33e7ff9605322334d

Exploitation evidence

  1. Disclosed: evidence found.

    CVE published 6 Oct 2026

  2. Detectable: no evidence on record.

    No public nuclei template indexed

  3. Weaponised: no evidence on record.

    No public exploit code indexed in Metasploit or Exploit-DB

  4. Exploited in the wild: no evidence on record.

    Not in CISA KEV and no source reports exploitation

  5. Observed by OffSeq Mirage: no evidence on record.

    No attack traffic recorded by OffSeq Mirage sensors

A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 26 Oct 2026.

What to do

Upgrade Linux kernel to b1df2997d0cd2be7bef7b4ab64ccfd1019dedc81, a32bedab8ece9d1f90a1476a5b486a1804dc78ba or 3565893cc72cdf6b795cf6a33e7ff9605322334d.

Affected software

ProductAffectedFixed in
LinuxLinuxAffected
  • ≥ 882af9f13e830c0a4ef696bb72cd5998a5067a93, < b1df2997d0cd2be7bef7b4ab64ccfd1019dedc81
Fixed in
  • b1df2997d0cd2be7bef7b4ab64ccfd1019dedc81
LinuxLinuxAffected
  • ≥ 882af9f13e830c0a4ef696bb72cd5998a5067a93, < a32bedab8ece9d1f90a1476a5b486a1804dc78ba
Fixed in
  • a32bedab8ece9d1f90a1476a5b486a1804dc78ba
LinuxLinuxAffected
  • ≥ 882af9f13e830c0a4ef696bb72cd5998a5067a93, < 3565893cc72cdf6b795cf6a33e7ff9605322334d
Fixed in
  • 3565893cc72cdf6b795cf6a33e7ff9605322334d
LinuxLinuxAffected
  • =6.14
Fixed in–

AI-suggested

A fix is available in the specified Linux kernel commits. Users should update to a kernel version that includes these fixes to ensure the flag is properly cleared on rebuild failure and to maintain filesystem integrity.

Description

A vulnerability in the Linux kernel's btrfs filesystem involves improper clearing of a flag during free space tree rebuild failure. This can cause delayed reference processing to be skipped on a live filesystem, potentially affecting filesystem integrity. The issue is fixed in specific commits.

References

Community reviews

Loading reviews…