CVE-2026-98080

kernel: btrfs: do not force reloc root creation during qgroup_account_snapshot()

Loading…

Severity

Moderate

Red Hat Product Security

5.5

CVSS 3.1

Review impact separately from score.

Published · September 25, 2026

Updated · October 16, 2026

Description

A flaw was found in the Linux kernel's Btrfs file system. This vulnerability allows a local user to cause a Denial of Service (DoS) by performing snapshot creation and data relocation on a file system with quotas enabled. Due to improper metadata handling during snapshot quota accounting, the kernel attempts to reference an already released metadata block, triggering a kernel warning and forcing the file system into a read-only state.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.1 · 5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-617 · Reachable Assertion