CVE-2026-46251

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the btrfs file system where the block group tree dirty list can become corrupted. When the EXTENT TREE V2 incompat flag is set, the block group tree is unconditionally added to the switch commits list before the switch commit roots() function is called. Because the block group tree utilizes normal root dirty tracking, any transaction involving an allocation that dirties a block group results in the block group root already being linked to a list via the dirty list field. Consequently, the use of list add tail() is invalid, leading to the corruption of the prev and next members of block group root->dirty list.

This corruption can cause the switch commits and dirty cowonly roots lists to become mixed, potentially leading to a transaction abort when the system attempts to call update root() on a tree root that cannot be found.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.