CVE-2026-90260

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the btrfs zoned filesystem where a freed-but-still-dirty tree block is written as zeros to maintain the zone write pointer. The btree csum one bio() function previously performed this by zeroing the extent buffer's own folios before submission, which destroyed the in-memory buffer while it might still be referenced. Consequently, if btrfs free tree block() runs afterward, it reads a zeroed header, leading to the corruption of the extent tree or a system abort.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.