CVE-2026-98081
kernel: btrfs: zoned: finish active block group cleanup if call_zone_finish() fails
Severity
LowRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · September 25, 2026
Updated · October 29, 2026
Description
A flaw was found in the Linux kernel's Btrfs file system when handling zoned storage devices. When an operation to finish a storage zone fails, the system returns early without completing proper cleanup, leaving the block group in an inconsistent state and stranding waiting tasks. A local user could exploit this condition during storage operations to induce an infinite loop, resulting in a system hang and Denial of Service (DoS).
Statement
This vulnerability is rated as having a Low impact because exploitation is constrained to a local denial of service and requires specialized zoned block device hardware combined with an unexpected I/O error during zone completion. In typical Red Hat Enterprise Linux deployments, Btrfs is not used as the default root filesystem, and zoned storage configurations are uncommon. Consequently, standard enterprise installations running on conventional block storage are not exposed to this condition.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-459 · Incomplete Cleanup