CVE-2026-98079
kernel: btrfs: zstd: fix lost wakeup when waiting for a workspace
Severity
LowRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · September 25, 2026
Updated · October 29, 2026
Description
A flaw was found in the Linux kernel's Btrfs file system. A local user could trigger a Denial of Service (DoS) when performing write operations on a file system using Zstandard (zstd) compression. Due to a synchronization timing issue during memory allocation, a write task can miss a wake-up notification and hang indefinitely waiting for an available compression workspace.
Statement
This vulnerability is rated as having Low severity because exploitation requires local access with write privileges on a mounted Btrfs filesystem explicitly configured with Zstandard compression. Furthermore, Btrfs is not enabled by default or supported in standard Red Hat Enterprise Linux deployments, significantly restricting typical exposure. Under specific memory allocation strain, the issue results in an indefinite process hang affecting the write operation without causing kernel memory corruption or privilege escalation.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-821 · Incorrect Synchronization