PT-2026-34424 · Linux · Linux Kernel

Published 2026-04-22 · Updated 2026-04-22 · CVE-2026-31519

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the btrfs file system where the BTRFS ROOT ORPHAN CLEANUP bit is not set during subvolume creation in the create subvol() function. This can lead to a race condition between lookup operations and delayed iputs, resulting in the creation of negative dentries for valid subvolumes. This state causes subvolumes to appear as broken dentries, where listing the parent directory or performing a stat operation fails. Consequently, attempting to delete the subvolume fails with an ENOENT error, while creating a new file or subvolume over it results in an EEXIST error or a file system abort. The issue is triggered when btrfs orphan cleanup() fails and btrfs lookup dentry() returns -ENOENT, leading to a negative dentry via d splice alias().

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2026-31519

Affected Products

Linux Kernel

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2026-31519 · Security Note
• https://git.kernel.org/stable/c/5131fa077f9bb386a1b901bf5b247041f0ec8f80 · Note
• https://git.kernel.org/stable/c/a41a9b8d19a98b45591528c6e54d31cc66271d1e · Note
• https://git.kernel.org/stable/c/2ec578e6452138ab76f6c9a9c18711fcd197649f · Note
• https://twitter.com/CVEnew/status/2046979951249772970 · Twitter Post
• https://git.kernel.org/stable/c/696683f214495db3cdacab9a713efaaced8660f8 · Note
• https://git.kernel.org/stable/c/d43da8de0ed376abafbad8a245a1835e8f66cb0f · Note
• https://twitter.com/VulmonFeeds/status/2047037784272015834 · Twitter Post
• https://git.kernel.org/stable/c/c57276ced3c3207f42182dfa2f0d8e860357e111 · Note