Security News
긴급도 10/100 심각도 미평가 · 미평가 악용확률 6.0%

CVE-2026-98269

Qualys 위협 인텔 · 심각도 5/5 · QID 766041 · SUSE
공개 익스플로잇 쉬운 악용 서비스 거부 권한상승 원격코드실행
  • CVSS Temporal 8.9 (현재 위협 반영)
  • 공격 위치: 로컬/인증필요
  • 패치: 가능
  • 익스플로잇 프레임워크: GitHub
  • PCI-DSS 관련
In the Linux kernel, the following vulnerability has been resolved:

btrfs: abort transaction on failure to update inode for hole punching and reflinking

If we fail to update the inode we error out without aborting the
transaction, which can result in a persistent inconsistency if after
the failure the transaction is committed, as we have dropped file
extent items from a range and either punched a hole or insert a new file
extent item for that range (for reflinks).

So add the missing transaction abort.

NVD 상세 ↗   GitHub Advisory ↗   참고 링크 ↗

이 취약점을 다룬 기사 (1)

← 취약점 목록