CVE-2026-98081

In the Linux kernel, the following vulnerability has been resolved:

btrfs: zoned: finish active block group cleanup if call zone finish() fails

do zone finish() clears BLOCK GROUP FLAG ZONE IS ACTIVE before finishing the zones. If call zone finish() then fails it returned early, leaving the now inactive block group on fs info->zone active bgs, leaking its reference, the BTRFS FS NEED ZONE FINISH waiters are never woken, and as its alloc offset equals the zone capacity btrfs zone finish one bg() keeps selecting it, spinning btrfs zoned activate one bg().

Fall through to the cleanup on failure too and return the error, but keep the block group read-only as its zones are left inconsistent.