CVE-2026-74321

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An invalid pointer dereference occurs in the btrfs module within the btrfs run delayed refs() function. The issue arises when the btrfs select ref head() function returns an error pointer (-EAGAIN). Because the locked ref variable is not reset to NULL upon receiving this error, the system subsequently attempts to execute spin lock(&locked ref->lock) using the error pointer, leading to the invalid dereference.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.