← Back to CVE List
CVE-2026-90259NVD
Vulnerability Summary
In the Linux kernel, the following vulnerability has been resolved:
btrfs: qgroup: fix a wrong length calculation in qgroup_free_reserved_data()
In that function, we round down the start position and round up the
ending position.
But during the calculation of @len, we use "round_up(start + len,
sectorsize)", which is the rounded up end position, not the rounded up
length.
Which results a much larger length, and later we are still using
"start + len", which is completely incorrect.
Fix it by declaring a local @aligned_start and @aligned_len and use them
instead.
btrfs: qgroup: fix a wrong length calculation in qgroup_free_reserved_data()
In that function, we round down the start position and round up the
ending position.
But during the calculation of @len, we use "round_up(start + len,
sectorsize)", which is the rounded up end position, not the rounded up
length.
Which results a much larger length, and later we are still using
"start + len", which is completely incorrect.
Fix it by declaring a local @aligned_start and @aligned_len and use them
instead.
Affected & Patched Versions
- Linux Linux >= bc42bda22345efdb5d8b578d1b4df2c6eaa85c58 and < e6edde29990af8064b9d12217ec03db231ccd55d
- Linux Linux >= bc42bda22345efdb5d8b578d1b4df2c6eaa85c58 and < c4c136555ff90f1e2921cc42da43daac0ef9985e
- Linux Linux >= bc42bda22345efdb5d8b578d1b4df2c6eaa85c58 and < 9102b179512e11644fb0489ae62010a09afa199c
- Linux Linux >= 4.13
- Linux Linux e6edde29990af8064b9d12217ec03db231ccd55d
- Linux Linux c4c136555ff90f1e2921cc42da43daac0ef9985e
- Linux Linux 9102b179512e11644fb0489ae62010a09afa199c