CVE-2026-90259

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the btrfs qgroup component where the qgroup free reserved data() function performs an incorrect length calculation. The function rounds down the start position and rounds up the ending position, but incorrectly uses the rounded-up end position instead of the rounded-up length when calculating the len variable. This results in an excessively large length value and subsequent incorrect calculations using start + len.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.