---
id: CVE-2026-98963
title: 'btrfs: always return -EIOCBQUEUED after btrfs_uring_read_extent_endio'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  btrfs: always return -EIOCBQUEUED after btrfs_uring_read_extent_endio

  If all bios finish before btrfs_encoded_read_regular_fill_pages()
  returns, it calls btrfs_uring_r…
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= 34310c442e175f286b4c06ab5caa4e0b267ea31c <
    033dda5b321f01661de518a8d5c8607ae8675b14
  - >-
    Linux >= 34310c442e175f286b4c06ab5caa4e0b267ea31c <
    a449433b0e3d4a3715d0bbee078f8c603f03c9f6
  - >-
    Linux >= 34310c442e175f286b4c06ab5caa4e0b267ea31c <
    80a8dbb30d2b00b9c671b02bd73f700f6d20100f
  - Linux 6.13
published: '2026-10-23'
updated: '2026-10-23'
sourceUpdated: '2026-10-23T12:19:31.392Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-98963'
references:
  - url: 'https://git.kernel.org/stable/c/033dda5b321f01661de518a8d5c8607ae8675b14'
  - url: 'https://git.kernel.org/stable/c/a449433b0e3d4a3715d0bbee078f8c603f03c9f6'
  - url: 'https://git.kernel.org/stable/c/80a8dbb30d2b00b9c671b02bd73f700f6d20100f'
tags:
  - cve.org
ingestedAt: '2026-10-23T13:24:55.555Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

btrfs: always return -EIOCBQUEUED after btrfs_uring_read_extent_endio

If all bios finish before btrfs_encoded_read_regular_fill_pages()
returns, it calls btrfs_uring_read_extent_endio() and previously
returned the I/O status.  A negative errno then made
btrfs_uring_read_extent() unlock and free while
btrfs_uring_read_finished() did the same again.

Return -EIOCBQUEUED so only the deferred path cleans up.

## Affected

- `Linux >= 34310c442e175f286b4c06ab5caa4e0b267ea31c < 033dda5b321f01661de518a8d5c8607ae8675b14`
- `Linux >= 34310c442e175f286b4c06ab5caa4e0b267ea31c < a449433b0e3d4a3715d0bbee078f8c603f03c9f6`
- `Linux >= 34310c442e175f286b4c06ab5caa4e0b267ea31c < 80a8dbb30d2b00b9c671b02bd73f700f6d20100f`
- `Linux 6.13`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.