File System Vulnerability in Linux Kernel's Btrfs Component

CVE-2026-31519

What is CVE-2026-31519?

The Btrfs component of the Linux kernel has a vulnerability that affects the management of subvolumes, resulting in broken directory entries (dentries) and associated errors. This can lead to failures when attempting to delete subvolumes or create new files within them, causing significant operational disruption. The issue arises from a failure in the orphan cleanup process, where the system fails to find orphan items for subvolumes, ultimately leaving users unable to manage their data effectively. Without proper handling, this could lead to data loss or corruption as actions are obstructed by persistent error messages such as ENOENT and EEXIST.

References