btrfs: do not force reloc root creation during qgroup_account_snapshot()
In the Linux kernel, the following vulnerability has been resolved: btrfs: do not force reloc root creation during qgroup_account_snapshot() [BUG] When running btrfs/252 with quota enabled through MKFS_OPTIONS="-O quota", it has a high chance to trigger the following kernel warning and flips the fs RO: BTRFS info (device dm-2): relocating block group 30408704 flags metadata|dup ------------[ cut here ]------------ WARNING: fs/btrfs/extent-tree.c:879 at lookup_inline_extent_backref+0x74b/0x960 [btrfs], CPU#4: btrfs/2173 CPU: 4 UID: 0 PID: 2173 Comm: btrfs Not tainted 7.2.0-rc6-custom+ #457 PREEMPT(full) 3adc6528fb66f7a55fe1095385818e742f200aab Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS unknown 02/02/2022 RIP: 0010:lookup_inline_extent_backref+0x74b/0x960 [btrfs] Call Trace: insert_inline_extent_backref+0x7c/0x160 [btrfs 32f09462c54d9c922fca74a3e4866f4aa7737b72] __btrfs_inc_extent_ref+0xa9/0x270 [btrfs 32f09462c54d9c922fca74a3e4866f4aa7737b72] __btrfs_run_delayed_refs+0x4af/0x11c0 [btrfs 32f09462c54d9c922fca74a3e4866f4aa7737b72] btrfs_run_delayed_refs+0x9d/0xf0 [btrfs 32f09462c54d9c922fca74a3e4866f4aa7737b72] create_pending_snapshot+0x39d/0xf00 [btrfs 32f09462c54d9c922fca74a3e4866f4aa7737b72] create_pending_snapshots+0x9b/0xc0 [btrfs 32f09462c54d9c922fca74a3e4866f4aa7737b72] btrfs_commit_transaction+0x280/0xeb0 [btrfs 32f09462c54d9c922fca74a3e4866f4aa7737b72] prepare_to_relocate+0x147/0x200 [btrfs 32f09462c54d9c922fca74a3e4866f4aa7737b72] relocate_block_group+0x6b
CVE-2026-98080
Primary source · Revision 1
Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.
Security context
Source reference: cve:CVE-2026-98080
Linux
Source reference: /containers/cna/affected/0/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Linux
Source reference: /containers/cna/affected/1/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Structured affected-version data
Original package identities and version rules from this source.
[
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"vendor": "Linux",
"product": "Linux",
"versions": [
{
"status": "affected",
"version": "4d31778aa2fa342f5f92ca4025b293a1729161d1",
"lessThan": "d0284d974be46a0a06068f930c84039d540ae8ed",
"versionType": "git"
},
{
"status": "affected",
"version": "4d31778aa2fa342f5f92ca4025b293a1729161d1",
"lessThan": "21bd77c132f18dc21c6fcdf417310d1adcf7448b",
"versionType": "git"
},
{
"status": "affected",
"version": "4d31778aa2fa342f5f92ca4025b293a1729161d1",
"lessThan": "7ce02d52548b672795511c2cac8da6ec79ac8877",
"versionType": "git"
},
{
"status": "affected",
"version": "4d31778aa2fa342f5f92ca4025b293a1729161d1",
"lessThan": "7caaae233a55e167063f4cfa3385b1a04c8bbecb",
"versionType": "git"
},
{
"status": "affected",
"version": "4d31778aa2fa342f5f92ca4025b293a1729161d1",
"lessThan": "c4c78768d1a8ceb713693cc5524acbe984c31f3c",
"versionType": "git"
},
{
"status": "affected",
"version": "4d31778aa2fa342f5f92ca4025b293a1729161d1",
"lessThan": "203cbfb4fba590bd9b08bd36fa6d05b5d28923bf",
"versionType": "git"
},
{
"status": "affected",
"version": "4d31778aa2fa342f5f92ca4025b293a1729161d1",
"lessThan": "b5d5ab5a715001dd937c920ef8c5688fd4999ba1",
"versionType": "git"
},
{
"status": "affected",
"version": "4d31778aa2fa342f5f92ca4025b293a1729161d1",
"lessThan": "cacf35832292997018837e484283f95a9301ebf5",
"versionType": "git"
},
{
"status": "affected",
"version": "204bfcda824428b3a298eae8e87875bbd435a3c1",
"versionType": "git"
},
{
"status": "affected",
"version": "1f586802bb18892d2a6eb7d31d7fed78946d21a1",
"versionType": "git"
},
{
"status": "affected",
"version": "4.14.45",
"lessThan": "4.15",
"versionType": "semver"
},
{
"status": "affected",
"version": "4.16.13",
"lessThan": "4.17",
"versionType": "semver"
}
],
"programFiles": [
"fs/btrfs/transaction.c"
],
"defaultStatus": "unaffected"
},
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"vendor": "Linux",
"product": "Linux",
"versions": [
{
"status": "affected",
"version": "4.17"
},
{
"status": "unaffected",
"version": "0",
"lessThan": "4.17",
"versionType": "semver"
},
{
"status": "unaffected",
"version": "5.10.271",
"versionType": "semver",
"lessThanOrEqual": "5.10.*"
},
{
"status": "unaffected",
"version": "5.15.222",
"versionType": "semver",
"lessThanOrEqual": "5.15.*"
},
{
"status": "unaffected",
"version": "6.1.189",
"versionType": "semver",
"lessThanOrEqual": "6.1.*"
},
{
"status": "unaffected",
"version": "6.6.158",
"versionType": "semver",
"lessThanOrEqual": "6.6.*"
},
{
"status": "unaffected",
"version": "6.12.111",
"versionType": "semver",
"lessThanOrEqual": "6.12.*"
},
{
"status": "unaffected",
"version": "6.18.53",
"versionType": "semver",
"lessThanOrEqual": "6.18.*"
},
{
"status": "unaffected",
"version": "7.2.7",
"versionType": "semver",
"lessThanOrEqual": "7.2.*"
},
{
"status": "unaffected",
"version": "7.3",
"versionType": "original_commit_for_fix",
"lessThanOrEqual": "*"
}
],
"programFiles": [
"fs/btrfs/transaction.c"
],
"defaultStatus": "affected"
}
]- Related CVEs
- CVE-2026-98080
Source reference:
/cveMetadata/cveId
Publisher severity
No explicit severity was provided.
- Event
- #38188 · Revision 1
- Added to Heist Feed
- Publisher date