CVE-2026-90259

btrfs: qgroup: fix a wrong length calculation in qgroup_free_reserved_data()

State
Published
Severity
Not scored
Published
Sep 17, 2026
Updated
Oct 30, 2026
Reserved
Sep 11, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

btrfs: qgroup: fix a wrong length calculation in qgroup_free_reserved_data()

In that function, we round down the start position and round up the ending position.

But during the calculation of @len, we use "round_up(start + len, sectorsize)", which is the rounded up end position, not the rounded up length.

Which results a much larger length, and later we are still using "start + len", which is completely incorrect.

Fix it by declaring a local @aligned_start and @aligned_len and use them instead.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • bc42bda22345efdb5d8b578d1b4df2c6eaa85c58 to before 036e6c216be66a085da3a0519f1be5f3230b6e26Affected
  • bc42bda22345efdb5d8b578d1b4df2c6eaa85c58 to before 202ac9e469b78817512921c5db05cc2140e4ca43Affected
  • bc42bda22345efdb5d8b578d1b4df2c6eaa85c58 to before 34adc843c28e5cd1f533a1d64f51b0f756fdf945Affected
  • bc42bda22345efdb5d8b578d1b4df2c6eaa85c58 to before e6edde29990af8064b9d12217ec03db231ccd55dAffected
  • bc42bda22345efdb5d8b578d1b4df2c6eaa85c58 to before c4c136555ff90f1e2921cc42da43daac0ef9985eAffected
  • bc42bda22345efdb5d8b578d1b4df2c6eaa85c58 to before 9102b179512e11644fb0489ae62010a09afa199cAffected
LinuxLinux
  • 4.13Affected
  • before 4.13Not affected
  • 6.1.191 through 6.1.*Not affected
  • 6.6.160 through 6.6.*Not affected
  • 6.12.114 through 6.12.*Not affected
  • 6.18.52 through 6.18.*Not affected
  • 7.2.6 through 7.2.*Not affected
  • 7.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.