CVE-2026-98961

In the Linux kernel, the following vulnerability has been resolved: btrfs: unlock inode and extent in caller when io_uring read extent fails btrfs_uring_read_extent() runs only after btrfs_encoded_read() has taken the inode shared lock and the extent lock. On failure it used to unlock in out_fail, and a pages-array allocation failure returned -ENOMEM without unlocking at all. Unlock in the caller instead on all failure returns, matching the copy_to_user() error path. The deferred -EIOCBQUEUED path still unlocks in btrfs_uring_read_finished().

• https://git.kernel.org/stable/c/2797eb38773a96914ccedeec71eb2144645400b2
• https://git.kernel.org/stable/c/ada1fc725a4db407294ae90a0d40ef1c46f457f2
• https://git.kernel.org/stable/c/b6e8add5d79d1f6f819a054c833bab452bd7365d

Published

Oct 23, 2026

Last Modified

Oct 23, 2026

Status

Received

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-98956In the Linux kernel, the following vulnerability has been re…
• CVE-2026-98957In the Linux kernel, the following vulnerability has been re…
• CVE-2026-98958In the Linux kernel, the following vulnerability has been re…
• CVE-2026-98959In the Linux kernel, the following vulnerability has been re…9.8
• CVE-2026-9896Out of bounds write in V8 in Google Chrome prior to 148.0.77…8.8
• CVE-2026-98960In the Linux kernel, the following vulnerability has been re…
• CVE-2026-98962In the Linux kernel, the following vulnerability has been re…
• CVE-2026-98963In the Linux kernel, the following vulnerability has been re…
• CVE-2026-98964In the Linux kernel, the following vulnerability has been re…7.5
• CVE-2026-98965In the Linux kernel, the following vulnerability has been re…7.5
• CVE-2026-98966In the Linux kernel, the following vulnerability has been re…
• CVE-2026-98967In the Linux kernel, the following vulnerability has been re…