CVE-2026-98090

medium

In the Linux kernel, the following vulnerability has been resolved: btrfs: restore active device pointers after failed sprout btrfs_init_new_device() switche…

Vendor / product: Linux — linux kernel

In the Linux kernel, the following vulnerability has been resolved: btrfs: restore active device pointers after failed sprout btrfs_init_new_device() switches latest_dev and possibly s_bdev from the seed device to the new sprout device before creating the first writable chunks. If chunk creation or the subsequent sprout setup fails, the error path releases the new device without switching those pointers back. btrfs_show_devname() can then dereference the freed latest_dev and crash. Restore the active device pointers to the latest seed device before removing and releasing the failed sprout device.

CVSS

5.5

5.5 (CVSS v3.1)

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Severity source: NVD CVSS v3.1 (nvd@nist.gov)

Timeline (UTC)

Published: 2026-09-25 11:17

Modified: 2026-10-23 19:00

NVD status: Analyzed

Last synced 2 days ago

Verified against the source API 2026-10-27 06:55 UTC

Exploitation

Not listed in CISA KEV (as of last catalog sync)

Absence from KEV does not mean a CVE is not exploited. Exploitation status: unknown (no authoritative evidence in our sources).

Affected products

linux / linux_kernel ≥5.13 <5.15.222, ≥5.16 <6.1.189, ≥6.2 <6.6.158, ≥6.7 <6.12.111, ≥6.13 <6.18.53, ≥6.19 <7.2.7

Weakness classification (CWE)

CWE-416

Source: NVD / CISA. “NVD-CWE-Other” and “NVD-CWE-noinfo” mean NVD could not assign a specific weakness.

Mitigation & advisories

Patch / mitigation: https://git.kernel.org/stable/c/0a0ee38ad6324ac1603079bb785f784191576bd5

Patch / mitigation: https://git.kernel.org/stable/c/2ee5c4bc11007c51f63f0c1be5d3f07f2b404ff7

Patch / mitigation: https://git.kernel.org/stable/c/46863a9f93186e620c70584f91c8d5d95da83eff

Patch / mitigation: https://git.kernel.org/stable/c/49179f13c04735c55fd0f43b03696c015b067137

Patch / mitigation: https://git.kernel.org/stable/c/b79b4b29003690acfade8241998fc0104ef9c84c

Patch / mitigation: https://git.kernel.org/stable/c/e0b54613aabeb8e9da597f23b90c6a03d0981986

Patch / mitigation: https://git.kernel.org/stable/c/e127ac29a52134d0f4cba39d38e4b375deb3d1aa

References

https://git.kernel.org/stable/c/0a0ee38ad6324ac1603079bb785f784191576bd5 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/2ee5c4bc11007c51f63f0c1be5d3f07f2b404ff7 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/46863a9f93186e620c70584f91c8d5d95da83eff 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/49179f13c04735c55fd0f43b03696c015b067137 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/b79b4b29003690acfade8241998fc0104ef9c84c 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/e0b54613aabeb8e9da597f23b90c6a03d0981986 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/e127ac29a52134d0f4cba39d38e4b375deb3d1aa 416baaa9-dc9f-4396-8d5f-8c081fb06d67

Data sources

NVD CVE API 2.0 — fetched 2026-10-27 06:55 UTC · record ↗

Learn the basics

Understanding CVEs and CVSS Scores

CVE-2026-98090

Affected products

Weakness classification (CWE)

Mitigation & advisories

References

Data sources

Learn the basics

Related CVEs