CVE-2026-98091 | Linux Kernel up to 6.12.110/6.18.52/7.2.6/7.3-rc1 btrfs btrfs_init_new_device use after free

A vulnerability was found in Linux Kernel up to 6.12.110/6.18.52/7.2.6/7.3-rc1 and classified as very critical. This affects the function btrfs_init_new_device of the component btrfs. Executing a manipulation can lead to use after free.

This vulnerability is tracked as CVE-2026-98091. The attack can be launched remotely. No exploit exists.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More