CVE-2026-89645

In the Linux kernel, the following vulnerability has been resolved: btrfs: drop recovered reloc root refs on recovery failure During relocation recovery, each fs root gets a reference to its relocation root. If loading or adding a later root fails, or if the first transaction commit fails, btrfs_recover_relocation() jumps to out_unset before merge_reloc_roots() and clean_dirty_subvols(). put_reloc_control() drops the list-owned relocation root references, but it does not clear fs_root->reloc_root or drop the references owned by those pointers. Mount cleanup only drops them when BTRFS_FS_ERROR is set, so an error such as -ENOMEM while processing a later root can leave references behind. Keep temporary references to the fs roots associated during recovery. On failure, clear their reloc_root pointers and drop the corresponding references. Once the first transaction commit succeeds, drop only the temporary fs root references and let the normal merge and cleanup paths handle the relocation roots. Fault injection on a pending-relocation image confirmed the cleanup gap. With an injected first-commit failure, 25 fs roots had reloc_root set with fs_error=0. With this fix, the same failure path drops that count to 0 before mount fails.

• https://git.kernel.org/stable/c/2256d6dc5b88841a8a8b4fd9a9f04730705fb6fd
• https://git.kernel.org/stable/c/4d43107e807bcd92621106b07f5011411c6341a8
• https://git.kernel.org/stable/c/6d8ba4572922e336f0b59a80751b018e1e135164
• https://git.kernel.org/stable/c/8a64baeb5bbb706b83d2235c1e39f5b77183817f

Published

Sep 11, 2026

Last Modified

Sep 11, 2026

Status

Received

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-8964Spoofing issue in the Popup Blocker component. This vulnerab…7.5
• CVE-2026-89640In the Linux kernel, the following vulnerability has been re…7.1
• CVE-2026-89641In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2026-89642In the Linux kernel, the following vulnerability has been re…
• CVE-2026-89643In the Linux kernel, the following vulnerability has been re…9.8
• CVE-2026-89644In the Linux kernel, the following vulnerability has been re…
• CVE-2026-89646In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2026-89647In the Linux kernel, the following vulnerability has been re…7.5
• CVE-2026-89648In the Linux kernel, the following vulnerability has been re…7.5
• CVE-2026-89649In the Linux kernel, the following vulnerability has been re…9.1
• CVE-2026-8965Information disclosure in the DOM: Security component. This …7.5
• CVE-2026-89650In the Linux kernel, the following vulnerability has been re…9.1