CVE-2026-90266

CVE-2026-90266

published September 17, 2026

CVSS
—
EPSS
0%
Percentile
9.0
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

btrfs: zoned: don't force read-only on transient -EAGAIN from reloc merge

On a zoned FS, btrfs_delayed_refs_rsv_refill() returns -EAGAIN whenever

the over-committed metadata plus the zone_unusable bytes exceeds the

usable size in a metadata block-group to avoid heavy over-commit of

metadata and early ENOSPC in one transaction.

If this happens while doing reclaim, the transaction is getting aborted.

Treat -EAGAIN as a soft, retryable condition in case of block-group

reclaim.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00198 · 9.0th percentile
Published
2026-09-17T21:17Z
References (2)
EPSS history
Timeline
  • 19 SEP 03:55Z
    EPSS moved — → 0%
    epss
  • 17 SEP 16:08Z
    btrfs: zoned: don't force read-only on transient -EAGAIN from reloc merge
    cvelistv5