CVE Database›Document archive›CVE-2026-98079

CVE-2026-98079

kernel: btrfs: zstd: fix lost wakeup when waiting for a workspace

Loading…

Severity

Low

Red Hat Product Security

5.5

CVSS 3.1

Review impact separately from score.

Published · September 25, 2026

Updated · October 29, 2026

Description

A flaw was found in the Linux kernel's Btrfs file system. A local user could trigger a Denial of Service (DoS) when performing write operations on a file system using Zstandard (zstd) compression. Due to a synchronization timing issue during memory allocation, a write task can miss a wake-up notification and hang indefinitely waiting for an available compression workspace.

Statement

This vulnerability is rated as having Low severity because exploitation requires local access with write privileges on a mounted Btrfs filesystem explicitly configured with Zstandard compression. Furthermore, Btrfs is not enabled by default or supported in standard Red Hat Enterprise Linux deployments, significantly restricting typical exposure. Under specific memory allocation strain, the issue results in an indefinite process hang affecting the write operation without causing kernel memory corruption or privilege escalation.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.1 · 5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-821 · Incorrect Synchronization