In the Linux kernel, the following vulnerability has been resolved: btrfs: protect sb_write_pointer() with invalidate lock sb_write_pointer() reads… (CVE-2026-98907)

The vulnerability in the Linux kernel's Btrfs filesystem involved the sb_write_pointer() function reading the super block from the block device page cache using read_cache_page_gfp(). This operation had a race condition with block size changes (BLKBSZSET), similar to a previously fixed issue. The resolution was to take the mapping invalidate lock around the read_cache_page_gfp() call to ensure serialization against block size changes, preventing the race condition.

The race condition could potentially lead to inconsistent or incorrect reads of the super block in the Btrfs filesystem, which might affect filesystem integrity or stability. No specific exploitation details or impacts such as privilege escalation or data corruption are provided in the input data.

A fix has been implemented in the Linux kernel to address this vulnerability by adding the mapping invalidate lock around the read operation in sb_write_pointer(). Users should apply the official kernel updates that include this fix. Patch status is not explicitly confirmed in the input data; therefore, check the vendor advisory for current remediation guidance.