CVE-2026-98269

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

btrfs: abort transaction on failure to update inode for hole punching and reflinking

If we fail to update the inode we error out without aborting the

transaction, which can result in a persistent inconsistency if after

the failure the transaction is committed, as we have dropped file

extent items from a range and either punched a hole or insert a new file

extent item for that range (for reflinks).

So add the missing transaction abort.

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References