PT-2026-121932
CVE-2026-98960
·
Published
2026-10-23
·
Updated
2026-10-23
Description by
Score
N/A
Not availableNo severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
In the Linux kernel, the following vulnerability has been resolved:
btrfs: don't stash io uring encoded data across -EAGAIN
Returning -EAGAIN while leaving btrfs uring encoded data in the cmd PDU
leaks if the request is cancelled or the ring exits before reissue.
io uring does not free driver PDU allocations on cleanup.
Write: io queue sqe() always issues with IO URING F NONBLOCK first, so
return -EAGAIN before allocating and free data on every exit.
Read: free on nowait -EAGAIN too; only -EIOCBQUEUED keeps the allocation
for btrfs uring read finished().
Found an issue in the description? Have something to add? Feel free to write us 👾