CVE-2026-90259btrfs: qgroup: fix a wrong length calculation in qgroup_free_reserved_data()
- —Not scoredno CVSS score yet
- 0.21%Exploitation in 30 daysEPSS · top 88% of all CVEs
- NoKnown exploitednot in CISA's KEV catalog
- NonePublic exploitsnone known yet
Description
In the Linux kernel, the following vulnerability has been resolved: btrfs: qgroup: fix a wrong length calculation in qgroup_free_reserved_data() In that function, we round down the start position and round up the ending position. But during the calculation of @len, we use "round_up(start + len, sectorsize)", which is the rounded up end position, not the rounded up length. Which results a much larger length, and later we are still using "start + len", which is completely incorrect. Fix it by declaring a local @aligned_start and @aligned_len and use them instead.
Timeline
ID reserved
By Linux
- 6 days later
· 6 days later
Published
- 43 days later
· 43 days later
Record updated
Changes after publication (a new score, a public exploit, EPSS crossing 1, 10 or 50 %, leaving KEV) are kept since November 2026; earlier ones are not known.
Scores
No CVSS score yet: neither the CNA, CISA nor NVD has scored this CVE. NVD status: Received.
- EPSS (exploitation in 30 days)
- 0.21% · top 88% of all CVEs (13 Nov 2026)
The list uses the assigner's score when there is one, then CISA's, then NVD's: Not scored.
Affected products
- affected bc42bda22345efdb5d8b578d1b4df2c6eaa85c58 – < 036e6c216be66a085da3a0519f1be5f3230b6e26
- affected bc42bda22345efdb5d8b578d1b4df2c6eaa85c58 – < 202ac9e469b78817512921c5db05cc2140e4ca43
- affected bc42bda22345efdb5d8b578d1b4df2c6eaa85c58 – < 34adc843c28e5cd1f533a1d64f51b0f756fdf945
- affected bc42bda22345efdb5d8b578d1b4df2c6eaa85c58 – < e6edde29990af8064b9d12217ec03db231ccd55d
- affected bc42bda22345efdb5d8b578d1b4df2c6eaa85c58 – < c4c136555ff90f1e2921cc42da43daac0ef9985e
- affected bc42bda22345efdb5d8b578d1b4df2c6eaa85c58 – < 9102b179512e11644fb0489ae62010a09afa199c
- affected 4.13
- unaffected < 4.13
- unaffected 6.1.191 – ≤ 6.1.*
- unaffected 6.6.160 – ≤ 6.6.*
- unaffected 6.12.114 – ≤ 6.12.*
- unaffected 6.18.52 – ≤ 6.18.*
- unaffected 7.2.6 – ≤ 7.2.*
- unaffected 7.3 – ≤ *
References
References6
- https://git.kernel.org/stable/c/036e6c216be66a085da3a0519f1be5f3230b6e26 (opens in a new tab)
- https://git.kernel.org/stable/c/202ac9e469b78817512921c5db05cc2140e4ca43 (opens in a new tab)
- https://git.kernel.org/stable/c/34adc843c28e5cd1f533a1d64f51b0f756fdf945 (opens in a new tab)
- https://git.kernel.org/stable/c/e6edde29990af8064b9d12217ec03db231ccd55d (opens in a new tab)
- https://git.kernel.org/stable/c/c4c136555ff90f1e2921cc42da43daac0ef9985e (opens in a new tab)
- https://git.kernel.org/stable/c/9102b179512e11644fb0489ae62010a09afa199c (opens in a new tab)
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- EUVD EUVD-2026-81852 (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://cveledger.app/cve/CVE-2026-90259)Record last updated .