CVE-2026-98245: btrfs: take commit root semaphore when iterating in mark_block_group_to_copy()

Affected Software

Remediation

Recommended actions to resolve this vulnerability, in priority order.

1. Upgrade

   Upgrade debian/linux to a version that resolves this vulnerability.

   Fixed in 6.12.113-1
2. Upgrade

   Upgrade debian/linux to a version that resolves this vulnerability.

   Fixed in 7.2.8-1
3. Upgrade

   Upgrade debian/linux-6.12 to a version that resolves this vulnerability.

   Fixed in 6.12.113-1~deb12u1
4. Upgrade

   Upgrade linux/Kernel to a version that resolves this vulnerability.

   Fixed in 5.15.224
5. Upgrade

   Upgrade linux/Kernel to a version that resolves this vulnerability.

   Fixed in 6.1.191
6. Upgrade

   Upgrade linux/Kernel to a version that resolves this vulnerability.

   Fixed in 6.6.160
7. Upgrade

   Upgrade linux/Kernel to a version that resolves this vulnerability.

   Fixed in 6.12.112
8. Upgrade

   Upgrade linux/Kernel to a version that resolves this vulnerability.

   Fixed in 6.18.54
9. Upgrade

   Upgrade linux/Kernel to a version that resolves this vulnerability.

   Fixed in 7.2.8
10. Upgrade

    Upgrade debian/linux to a version that resolves this vulnerability.

    Fixed in 6.12.115-2Fixed in 7.2.12-1Fixed in 7.2.15-1
11. Upgrade

    Upgrade ubuntu/linux-hwe-7.0 to a version that resolves this vulnerability.

    Fixed in 7.0.0-42.42~24.04.1
12. Upgrade

    Upgrade ubuntu/linux-riscv-7.0 to a version that resolves this vulnerability.

    Fixed in 7.0.0-42.42.1~24.04.1
13. Upgrade

    Upgrade ubuntu/linux to a version that resolves this vulnerability.

    Fixed in 7.0.0-42.42
14. Upgrade

    Upgrade ubuntu/linux-aws to a version that resolves this vulnerability.

    Fixed in 7.0.0-1016.17
15. Upgrade

    Upgrade ubuntu/linux-gcp to a version that resolves this vulnerability.

    Fixed in 7.0.0-1016.18
16. Upgrade

    Upgrade ubuntu/linux-ibm to a version that resolves this vulnerability.

    Fixed in 7.0.0-1017.17
17. Upgrade

    Upgrade ubuntu/linux-oem-7.0 to a version that resolves this vulnerability.

    Fixed in 7.0.0-1017.17
18. Upgrade

    Upgrade ubuntu/linux-oracle to a version that resolves this vulnerability.

    Fixed in 7.0.0-1015.16
19. Upgrade

    Upgrade ubuntu/linux-riscv to a version that resolves this vulnerability.

    Fixed in 7.0.0-42.42.1
20. Compensating control

    In btrfs mark_block_group_to_copy(), use path->need_commit_sem to protect the commit root search while iterating with skip_locking=true.

Event History

Parent advisories

This vulnerability appears in the following advisories.

• DSA-6568

Peer vulnerabilities

Found alongside the following vulnerabilities.

• DLA-4850-1