CVE-2026-98082

btrfs: fix the possible bioc_list memory leak during error

State
Published
Severity
Not scored
Published
Sep 25, 2026
Updated
Oct 19, 2026
Reserved
Sep 25, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

btrfs: fix the possible bioc_list memory leak during error

There are two possible ways to leak bioc memory on btrfs_ordered_extent::bioc_list:

- An error occurred for btrfs_insert_one_raid_extent() Then the function btrfs_insert_raid_extent() immediately return without freeing any bioc in the bioc_list.

- An ordered extent hit an IO error In that case the ordered extent will have BTRFS_ORDERED_IOERR set, and skip the call on btrfs_insert_raid_extent() completely.

Fix the problem by:

- Introduce a new helper, btrfs_cleanup_ordered_bioc_list() Which will remove all bioc from the bioc_list, and release the bioc.

- Call the above helper for btrfs_insert_raid_extent() So that the cleanup helper is always called no matter what.

- Call the above helper for btrfs_finish_one_ordered() This is called just before the final release on the ordered extent.

This was reported by Sashiko when reviewing another patch.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • ab69bf6f8970c09d3735c25094e9471d54365282 to before d043c43d2b4ebcd75ee7f907948ef2847306d6b2Affected
  • 02c372e1f016e5113217597ab37b399c4e407477 to before 83f0c973cffb184d019390ffdb5d31de5c85bc61Affected
  • 02c372e1f016e5113217597ab37b399c4e407477 to before 1b4d4e890c2c85d0f6365b5a08c48b4bbf85deb0Affected
  • 02c372e1f016e5113217597ab37b399c4e407477 to before bb4da45766d16503821f167054db76b735d89e94Affected
  • 02c372e1f016e5113217597ab37b399c4e407477 to before afbe73778338e6d1ac8c4486fbdf33f0cc1f2624Affected
  • 6.6.130 to before 6.6.158Affected
LinuxLinux
  • 6.7Affected
  • before 6.7Not affected
  • 6.6.158 through 6.6.*Not affected
  • 6.12.111 through 6.12.*Not affected
  • 6.18.53 through 6.18.*Not affected
  • 7.2.7 through 7.2.*Not affected
  • 7.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.