CVE-2026-74571

A flaw was found in the Linux kernel's btrfs filesystem. When mounting a btrfs filesystem with the rescue=ibadroots option after corrupting the block group tree root or raid stripe tree root, the system attempts to update the global block reserve. This process dereferences a missing root pointer, leading to a NULL pointer dereference. This vulnerability can cause a system crash, resulting in a Denial of Service (DoS).

This vulnerability is rated as having Low severity because exploitation requires local privileges to mount a crafted filesystem using specialized rescue recovery parameters. Under standard enterprise deployments, filesystem mounting operations are restricted to administrative users, and rescue options are invoked only during manual disaster recovery procedures. Consequently, unprivileged users cannot trigger this kernel crash during routine system operations.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.