---
id: CVE-2026-98082
title: |-
  In the Linux kernel, the following vulnerability has been resolved:

  btrfs: fix the possible bioc_list memory leak during error

  There are two possible ways to leak bioc memory on
  btrfs_ordered_extent::bioc_list:

  - An error occurred for…
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  btrfs: fix the possible bioc_list memory leak during error

  There are two possible ways to leak bioc memory on
  btrfs_ordered_extent::bioc_list:

  - An error occurred for…
severity: medium
cvss: 5.5
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'
cwe:
  - CWE-401
  - CWE-772
vendor: linux
product: linux_kernel
affected:
  - 'linux_kernel >= 6.6.130, < 6.6.158'
  - 'linux_kernel >= 6.7, < 6.12.111'
  - 'linux_kernel >= 6.13, < 6.18.53'
  - 'linux_kernel >= 6.19, < 7.2.7'
  - linux_kernel = 7.3
patched:
  - linux_kernel 7.2.7
published: '2026-09-25'
updated: '2026-10-06'
sourceUpdated: '2026-10-06T15:01:24.780'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-98082'
references:
  - url: 'https://git.kernel.org/stable/c/1b4d4e890c2c85d0f6365b5a08c48b4bbf85deb0'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/83f0c973cffb184d019390ffdb5d31de5c85bc61'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/afbe73778338e6d1ac8c4486fbdf33f0cc1f2624'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/bb4da45766d16503821f167054db76b735d89e94'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/d043c43d2b4ebcd75ee7f907948ef2847306d6b2'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: >-
      https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-98082.json
  - url: 'https://access.redhat.com/security/cve/CVE-2026-98082'
  - url: 'https://bugzilla.redhat.com/show_bug.cgi?id=2541300'
  - url: 'https://www.cve.org/CVERecord?id=CVE-2026-98082'
  - url: 'https://nvd.nist.gov/vuln/detail/CVE-2026-98082'
  - url: >-
      https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-98082.mbox
tags:
  - nvd
  - cve.org
  - csaf
  - vex
  - red-hat
epss: 0.00122
epssPercentile: 0.01968
ingestedAt: '2026-09-25T11:06:38.835Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

btrfs: fix the possible bioc_list memory leak during error

There are two possible ways to leak bioc memory on
btrfs_ordered_extent::bioc_list:

- An error occurred for btrfs_insert_one_raid_extent()
  Then the function btrfs_insert_raid_extent() immediately return
  without freeing any bioc in the bioc_list.

- An ordered extent hit an IO error
  In that case the ordered extent will have BTRFS_ORDERED_IOERR set, and
  skip the call on btrfs_insert_raid_extent() completely.

Fix the problem by:

- Introduce a new helper, btrfs_cleanup_ordered_bioc_list()
  Which will remove all bioc from the bioc_list, and release the bioc.

- Call the above helper for btrfs_insert_raid_extent()
  So that the cleanup helper is always called no matter what.

- Call the above helper for btrfs_finish_one_ordered()
  This is called just before the final release on the ordered extent.

This was reported by Sashiko when reviewing another patch.

## Affected

- `linux_kernel >= 6.6.130, < 6.6.158`
- `linux_kernel >= 6.7, < 6.12.111`
- `linux_kernel >= 6.13, < 6.18.53`
- `linux_kernel >= 6.19, < 7.2.7`
- `linux_kernel = 7.3`

## Remediation

Upgrade past the affected range:

- `linux_kernel 7.2.7`

## Vendor advisories

- **Red Hat VEX** · Low · affected: Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6 · no fix planned: Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 10 · updated 2026-09-30 · [vex](https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-98082.json)