CVE-2026-74319
mediumpriority · track · 0EPSS 0.002 · 9 %ileDEEUEPSS · scored 2026-10-27
In the Linux kernel, the following vulnerability has been resolved: btrfs: zoned: fix deadlock waiting for ticket during data relocation When performing data relocation on a zoned filesystem, BTRFS can deadlock in handle_reserve_tickets(). The relocation process is waiting on a space reservation ticket that can never be fulfilled, because the relocation itself is the operation responsible for freeing up that space. Fix this by introducing a new flush state, BTRFS_RESERVE_FLUSH_ZONED_RELOCATION, specifically for data chunk allocation during zoned relocation. Like BTRFS_RESERVE_FLUSH_FREE_SPACE_INODE, this state uses priority_reclaim_data_space() instead of the normal flushing path, which avoids re-entering the relocation code and breaking the deadlock cycle. In btrfs_alloc_data_chunk_ondemand(), select this new flush state when the inode belongs to a data relocation root on a zoned filesystem.
cvss
Technical severity, 0–10. One row per scoring source.
base score 0–10 · higher = more severe · hover a vector to decode
weaknesses
The CWE weakness classes this flaw belongs to.
affected products (17)
Products and version ranges known to be affected.
- Red Hat OpenShift Container Platformall versionscert_bundDEcpe:/a:redhat:openshift:container_platform
advisories (1)
Vendor and ecosystem advisories describing this.
- WID-SEC-W-2026-2852Linux Kernel: Mehrere SchwachstellenDeutsch2026-08-16csaf · cert_bundDE
Ein Angreifer kann mehrere Schwachstellen in Linux Kernel ausnutzen, um root Rechte zu erlangen, um einen Denial of Service herbeizuführen oder einen nicht näher spezifizierten Angriff durchzuführen.
also known as (3)
Other names and identifiers for this entity.
sources
Which sources assert this record, and when.
references (7)
External citations — patches, advisories, analysis.
- https://git.kernel.org/stable/c/814c3b4ea357297c507158bceb07bcdc5fbe9808cnnvd
- https://git.kernel.org/stable/c/f84dbbaa988e1344634a20ddf6c7d51a99f12477cnnvd
- https://kernel.orgPatchcnnvd
- https://git.kernel.org/stable/c/814c3b4ea357297c507158bceb07bcdc5fbe9808enisa_euvd
- https://git.kernel.org/stable/c/f84dbbaa988e1344634a20ddf6c7d51a99f12477enisa_euvd
- https://git.kernel.org/stable/c/814c3b4ea357297c507158bceb07bcdc5fbe9808nvd
- https://git.kernel.org/stable/c/f84dbbaa988e1344634a20ddf6c7d51a99f12477nvd
Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.
Free scan