---
id: CVE-2026-90262
title: |-
  In the Linux kernel, the following vulnerability has been resolved:

  btrfs: retry verity reads for not-uptodate Merkle folios

  btrfs_read_merkle_tree_page() can find a folio in the mapping that is not
  uptodate
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  btrfs: retry verity reads for not-uptodate Merkle folios

  btrfs_read_merkle_tree_page() can find a folio in the mapping that is not
  uptodate.  After taking the folio lo…
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= 06ed09351b67eb1114ae106a87a0ee3ea9adb3db <
    90e9eae1b5907fa36620ffb7f4f1a4afa9333427
  - >-
    Linux >= 06ed09351b67eb1114ae106a87a0ee3ea9adb3db <
    c1fa005cdf3b7ff14cdfd7d512830088a3fc256b
  - >-
    Linux >= 06ed09351b67eb1114ae106a87a0ee3ea9adb3db <
    12b6d1a1715cbced2e445ca353f9c9987b8636e2
  - >-
    Linux >= 06ed09351b67eb1114ae106a87a0ee3ea9adb3db <
    81241f734f0f662378f5ffc53882b012923e6fe5
  - >-
    Linux >= 06ed09351b67eb1114ae106a87a0ee3ea9adb3db <
    8cc569696dac51fc62bb39b3b8f530582b916d29
  - Linux 6.6
published: '2026-09-17'
updated: '2026-09-17'
sourceUpdated: '2026-09-17T17:17:22.640'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-90262'
references:
  - url: 'https://git.kernel.org/stable/c/12b6d1a1715cbced2e445ca353f9c9987b8636e2'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/81241f734f0f662378f5ffc53882b012923e6fe5'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/8cc569696dac51fc62bb39b3b8f530582b916d29'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/90e9eae1b5907fa36620ffb7f4f1a4afa9333427'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/c1fa005cdf3b7ff14cdfd7d512830088a3fc256b'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
tags:
  - nvd
  - cve.org
ingestedAt: '2026-09-17T16:21:47.841Z'
epss: 0.002
epssPercentile: 0.10181
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

btrfs: retry verity reads for not-uptodate Merkle folios

btrfs_read_merkle_tree_page() can find a folio in the mapping that is not
uptodate.  After taking the folio lock, the current code treats that state
as a read error and returns -EIO.

That can make a previous transient read failure sticky.  If the failed read
left a not-uptodate folio in the mapping, later callers find that folio and
fail instead of retrying the read.

Keep the existing page-cache insertion and locking order, but retry the
Merkle item read when a not-uptodate folio is found in the mapping.  Also
unlock the folio when read_key_bytes() fails so that a later caller can
lock it and retry the read.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.