CVE-2026-98269

Summary

In the Linux kernel, the following vulnerability has been resolved:

btrfs: abort transaction on failure to update inode for hole punching and reflinking

If we fail to update the inode we error out without aborting the transaction, which can result in a persistent inconsistency if after the failure the transaction is committed, as we have dropped file extent items from a range and either punched a hole or insert a new file extent item for that range (for reflinks).

So add the missing transaction abort.

Affected Software

VendorProductVersion RangeStatus
LinuxLinux2aaa66558172b017f36bf38ae69372813dedee9d < 2605eb9ba3bbd4c9f455cfe6b85bd28a1da7067daffected
LinuxLinux2aaa66558172b017f36bf38ae69372813dedee9d < 834a3b5c5f1ec0df48c1a6208f9989f4ffdaa0b6affected
LinuxLinux2aaa66558172b017f36bf38ae69372813dedee9d < 9588850bfa75c78ce73c2f6f72544d19d2e9beb6affected
LinuxLinux2aaa66558172b017f36bf38ae69372813dedee9d < 36c68dc909845c049e0286d229bc502947239452affected
LinuxLinux2aaa66558172b017f36bf38ae69372813dedee9d < 97fcd34aa9fd73cefe3120ac9a82ca9d7763922faffected
LinuxLinux3.7affected
LinuxLinux0 < 3.7unaffected
LinuxLinux6.6.158 <= 6.6.*unaffected
LinuxLinux6.12.112 <= 6.12.*unaffected
LinuxLinux6.18.54 <= 6.18.*unaffected
LinuxLinux7.2.8 <= 7.2.*unaffected
LinuxLinux7.3-rc4 <= *unaffected

Weaknesses

References