CVE-2026-90266: btrfs: zoned: don't force read-only on transient -EAGAIN from reloc merge

Published Sep 17, 2026
·
Updated

In the Linux kernel, the following vulnerability has been resolved:

btrfs: zoned: don't force read-only on transient -EAGAIN from reloc merge

On a zoned FS, btrfsdelayedrefsrsvrefill() returns -EAGAIN whenever the over-committed metadata plus the zoneunusable bytes exceeds the usable size in a metadata block-group to avoid heavy over-commit of metadata and early ENOSPC in one transaction.

If this happens while doing reclaim, the transaction is getting aborted.

Treat -EAGAIN as a soft, retryable condition in case of block-group reclaim.

Affected Software

1 affected component
Linux Linux kernel

Remediation

Recommended actions to resolve this vulnerability, in priority order.

  1. Configuration

    Apply the described btrfs zoned fix: on zoned FS, do not force read-only on transient -EAGAIN from reloc merge; instead treat -EAGAIN as a soft, retryable condition so the transaction is not aborted during reclaim.

    Linux kernel (btrfs zoned filesystem) btrfs_delayed_refs_rsv_refill() handling of -EAGAIN = treat -EAGAIN as soft, retryable during reclaim (especially for block-group transient -EAGAIN from reloc merge)

Event History

Sep 17, 2026
CVE Published
via MITRE·04:08 PM
Data Sourced
via MITRE·04:08 PM
Description

Frequently Asked Questions

1

Which systems are affected by this condition?

The issue applies to Linux kernel systems using a zoned Btrfs filesystem. It is triggered during block-group reclaim when metadata over-commitment plus zone-unusable space exceeds the usable size of a metadata block group.

2

What operational impact can occur?

A transient -EAGAIN returned by btrfs_delayed_refs_rsv_refill() during reclaim can abort the transaction and force the filesystem read-only. This can interrupt writes even though the condition is intended to be retryable.

3

What should happen if the condition is encountered?

During block-group reclaim, -EAGAIN should be treated as a soft, retryable condition rather than an error that aborts the transaction. The provided stable-kernel references identify the resolved behavior.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203