Riskcovery

CVE-2026-98907

btrfs: protect sb_write_pointer() with invalidate lock

State
Published
Severity
Not scored
Published
Oct 23, 2026
Updated
Oct 26, 2026
Reserved
Sep 25, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

btrfs: protect sb_write_pointer() with invalidate lock

sb_write_pointer() reads the super block from the block device page cache using read_cache_page_gfp(). This has the same race with BLKBSZSET as the one fixed by commit 3f29d661e568 ("btrfs: sync read disk super and set block size").

Take the mapping invalidate lock around read_cache_page_gfp() to serialize the read against block size changes.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 3c20917120ce61f2a123ca0810293872f4c6b5a4 to before 80cd97c5e90096d040a623851795eac92fbd0ff1Affected
  • 3c20917120ce61f2a123ca0810293872f4c6b5a4 to before 123b9a545f4d0348e81f558a032bf2a93ee5722fAffected
LinuxLinux
  • 6.15Affected
  • before 6.15Not affected
  • 6.18.53 through 6.18.*Not affected
  • 7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.