CVE-2026-74319
kernel: btrfs: zoned: fix deadlock waiting for ticket during data relocation
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · August 15, 2026
Updated · October 17, 2026
Description
A flaw was found in the btrfs zoned filesystem within the Linux kernel. When performing data relocation, the system can enter a deadlock state. This happens because the relocation process waits for a space reservation ticket that cannot be fulfilled, as the relocation itself is the operation intended to free that space. This vulnerability can lead to a system freeze, resulting in a Denial of Service (DoS).
Statement
A moderate severity denial of service flaw was found in the Linux kernel's btrfs implementation for zoned filesystems. When data relocation is performed on a zoned btrfs filesystem, the kernel can deadlock in handle_reserve_tickets(): the relocation process waits for a space reservation ticket that can never be fulfilled, because the relocation itself is the operation responsible for freeing that space. A local user with low privileges who is able to trigger data relocation on a zoned btrfs filesystem could use this flaw to cause a system freeze, resulting in a denial of service. Red Hat Enterprise Linux 6 through 10 and Red Hat In-Vehicle OS 2 are not affected by this flaw, because the vulnerable code is not present in the kernel versions shipped for those products.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-833 · Deadlock