-

CVE-2026-98245

btrfs: take commit root semaphore when iterating in mark_block_group_to_copy()

In the Linux kernel, the following vulnerability has been resolved:

btrfs: take commit root semaphore when iterating in mark_block_group_to_copy()

mark_block_group_to_copy() iterates over the commit root with
skip_locking=true. A concurrent transaction commit can swap and free
the commit root during iteration, causing use-after-free when
accessing extent buffers.

Fix it by using path->need_commit_sem to protect the commit root search.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version 78ce9fc269af6e69c1399ab910ba6bc81c934f67
Version < 8e2007b263ea250251ec3021a0a197da990ee1a8
Status affected
Version 78ce9fc269af6e69c1399ab910ba6bc81c934f67
Version < 709f6a5e986535005110c6c69b322f63631cb200
Status affected
Version 78ce9fc269af6e69c1399ab910ba6bc81c934f67
Version < c32490c6d3f3a9f2d177d57c7eb8bbc347561d08
Status affected
Version 78ce9fc269af6e69c1399ab910ba6bc81c934f67
Version < 0594e3423f4ba3137c734371169491f9a98e9af4
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 5.12
Status affected
Version 0
Version < 5.12
Status unaffected
Version <= 6.12.*
Version 6.12.112
Status unaffected
Version <= 6.18.*
Version 6.18.54
Status unaffected
Version <= 7.2.*
Version 7.2.8
Status unaffected
Version <= *
Version 7.3-rc4
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.17% 0.055
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/8e2007b263ea250251ec3021a0a197da990ee1a8
https://git.kernel.org/stable/c/709f6a5e986535005110c6c69b322f63631cb200
https://git.kernel.org/stable/c/c32490c6d3f3a9f2d177d57c7eb8bbc347561d08
https://git.kernel.org/stable/c/0594e3423f4ba3137c734371169491f9a98e9af4