CVE-2026-98963: btrfs: always return -EIOCBQUEUED after btrfs_uring_read_extent_endio
Published Oct 23, 2026
·Updated
In the Linux kernel, the following vulnerability has been resolved:
btrfs: always return -EIOCBQUEUED after btrfsuringreadextentendio
If all bios finish before btrfsencodedreadregularfillpages() returns, it calls btrfsuringreadextentendio() and previously returned the I/O status. A negative errno then made btrfsuringreadextent() unlock and free while btrfsuringreadfinished() did the same again.
Return -EIOCBQUEUED so only the deferred path cleans up.
Affected Software
1 affected component
Linux Linux kernel
Event History
Oct 23, 2026
CVE Published
via MITRE·12:19 PM
Data Sourced
via MITRE·12:19 PM
Description