CVE-2026-90264

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A race condition exists in the Btrfs file system of the Linux kernel. When a direct IO operation finishes short, the system reverts the isize to its original value to ensure append writes are respected during buffered fallback. However, the function lock and cleanup extent if need() only waits for existing ordered extents if the start pos is within the isize. Because of the isize reversion, the system may fail to wait for an ordered extent that is still in the tree but finished and not yet removed. This leads to a conflict when inserting a new ordered extent for a buffered write, resulting in a kernel panic in the insert ordered extent() function.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.