Kernel Vulnerability in Btrfs File System by Linux Vendor

CVE-2026-64164

What is CVE-2026-64164?

A vulnerability in the Btrfs file system within the Linux kernel can cause issues when the btrfs_sync_file() trace event is accessed in an atomic context. This results in a potential kernel splat due to the use of dput(), a function that can sleep when called at improper times. This is particularly evident when stress-testing the system with the btrfs/056 from fstests, leading to warnings in dmesg logs and indicating improper context execution. To mitigate this, it is recommended to directly access the parent dentry to prevent the vulnerabilities associated with sleeping functions being invoked during atomic operations.

References