Riskcovery

CVE-2026-98963

btrfs: always return -EIOCBQUEUED after btrfs_uring_read_extent_endio

State
Published
Severity
Not scored
Published
Oct 23, 2026
Updated
Oct 23, 2026
Reserved
Sep 25, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

btrfs: always return -EIOCBQUEUED after btrfs_uring_read_extent_endio

If all bios finish before btrfs_encoded_read_regular_fill_pages() returns, it calls btrfs_uring_read_extent_endio() and previously returned the I/O status. A negative errno then made btrfs_uring_read_extent() unlock and free while btrfs_uring_read_finished() did the same again.

Return -EIOCBQUEUED so only the deferred path cleans up.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 34310c442e175f286b4c06ab5caa4e0b267ea31c to before 033dda5b321f01661de518a8d5c8607ae8675b14Affected
  • 34310c442e175f286b4c06ab5caa4e0b267ea31c to before a449433b0e3d4a3715d0bbee078f8c603f03c9f6Affected
  • 34310c442e175f286b4c06ab5caa4e0b267ea31c to before 80a8dbb30d2b00b9c671b02bd73f700f6d20100fAffected
LinuxLinux
  • 6.13Affected
  • before 6.13Not affected
  • 6.18.57 through 6.18.*Not affected
  • 7.2.11 through 7.2.*Not affected
  • 7.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.