CVE-2026-98907
Unknown
Description
In the Linux kernel, the following vulnerability has been resolved: btrfs: protect sb_write_pointer() with invalidate lock sb_write_pointer() reads the super block from the block device page cache using read_cache_page_gfp(). This has the same race with BLKBSZSET as the one fixed by commit 3f29d661e568 ("btrfs: sync read disk super and set block size"). Take the mapping invalidate lock around read_cache_page_gfp() to serialize the read against block size changes.
SeverityUnknown
CVSS—
Exploit probability—
Product
Linux
PublishedOct 23, 2026
First seenOct 23, 2026
How to fix
Update
- Linux Linux80cd97c5e90096d040a623851795eac92fbd0ff1, 123b9a545f4d0348e81f558a032bf2a93ee5722f or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 3c20917120ce61f2a123ca0810293872f4c6b5a4 ≤ v < 80cd97c5e90096d040a623851795eac92fbd0ff1, 3c20917120ce61f2a123ca0810293872f4c6b5a4 ≤ v < 123b9a545f4d0348e81f558a032bf2a93ee5722f, 6.15 | 80cd97c5e90096d040a623851795eac92fbd0ff1, 123b9a545f4d0348e81f558a032bf2a93ee5722f |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.