CVE record · CVE-2026-98269

btrfs: abort transaction on failure to update inode for hole punching and reflinking

No CVSS scoreEPSS 0.0017 · 6th percentile

Published by the CVE Program (CNA: Linux) at 6 Oct 2026, 08:45 UTC. agentprime has not analysed this yet, so whether it affects any app is not known. This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it.

Affected products, as the CNA wrote them
VendorProductVersions
Linux Linux
  • affected 2aaa66558172b017f36bf38ae69372813dedee9d to before 2605eb9ba3bbd4c9f455cfe6b85bd28a1da7067d git
  • affected 2aaa66558172b017f36bf38ae69372813dedee9d to before 834a3b5c5f1ec0df48c1a6208f9989f4ffdaa0b6 git
  • affected 2aaa66558172b017f36bf38ae69372813dedee9d to before 9588850bfa75c78ce73c2f6f72544d19d2e9beb6 git
  • affected 2aaa66558172b017f36bf38ae69372813dedee9d to before 36c68dc909845c049e0286d229bc502947239452 git
  • affected 2aaa66558172b017f36bf38ae69372813dedee9d to before 97fcd34aa9fd73cefe3120ac9a82ca9d7763922f git
Other versions: unaffected
Linux Linux
  • affected 3.7
  • unaffected before 3.7 semver
  • unaffected 6.6.158 to 6.6.*, inclusive semver
  • unaffected 6.12.112 to 6.12.*, inclusive semver
  • unaffected 6.18.54 to 6.18.*, inclusive semver
  • unaffected 7.2.8 to 7.2.*, inclusive semver
  • unaffected 7.3 to *, inclusive original_commit_for_fix
Other versions: affected
Identifiers
CVE-2026-98269
CNA
Linux
Published
6 Oct 2026
Updated
19 Oct 2026

Not analysed yet

We haven’t published our own analysis of this CVE. If a person reviews it, this page will say what’s affected and what has to be true for it to matter.

Severity and exploitation

No source has published a CVSS score for this record yet.

  • CISA KEV Not listed.
  • EPSS 0.0017, the 6th percentile, on 10 Nov 2026: FIRST’s estimate of the chance of exploitation in the next 30 days.

Timeline

This record came from the full history of the CVE Program, published 6 Oct 2026. New records show when each source confirmed them.

Sources

References from the CNA

Facts on this page come from the CVE List as the CNA published them, with CVSS from the sources named above, CISA KEV and FIRST EPSS. Vendors, products and versions are shown as the CNA wrote them. We don’t reproduce the CVE’s description.