Not yet scoredPublished Oct 23, 2026

CVE-2026-98962btrfs: free iov when btrfs_uring_read_extent() fails

Updated under an hour ago (Oct 26, 2026, 12:40 PM ET)

Does this affect you?

It affects Linux. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: btrfs: free iov when btrfs_uring_read_extent() fails After btrfs_uring_read_extent(), the caller always jumped to out_acct. That skips kfree(data->iov), which is only correct for -EIOCBQUEUED where the deferred path owns the iov. On failure, fall through to out_free instead.

CVSS: Not yet scored
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Received
Record last updated: Oct 23, 2026
First seen by InfoSec Signals: Oct 23, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	34310c442e175f286b4c06ab5caa4e0b267ea31c builds before 7a3addbdc5ad1fd80541a6a4ff4e06cd1331530a; 34310c442e175f286b4c06ab5caa4e0b267ea31c builds before 578ef517142420cf9d36b364ad4b3490b85469fb; from 34310c442e175f286b4c06ab5caa4e0b267ea31c before a8ea92830b3e0e163d4e829bdcb17ca83c0f951c	CNA record

References

References

https://git.kernel.org/stable/c/7a3addbdc5ad1fd80541a6a4ff4e06cd1331530a
https://git.kernel.org/stable/c/578ef517142420cf9d36b364ad4b3490b85469fb
https://git.kernel.org/stable/c/a8ea92830b3e0e163d4e829bdcb17ca83c0f951c

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.