Skip to main content
cve.nowby Sazabi
← All vulnerabilities
CVE-2026-23145

ext4: fix iloc.bh leak in ext4_xattr_inode_update_ref

Published
Last modified
published
Not listed in CISA KEV
Fix
Fixed in 5.10.249, 5.15.199, 6.1.162, 6.6.122, 6.12.67, and 3 more
None on Exploit-DB, Metasploit or GitHub
  • Exploitation: none
  • Automatable: no
  • Technical impact: partial

Summary

In the Linux kernel, the following vulnerability has been resolved: ext4: fix iloc.bh leak in ext4_xattr_inode_update_ref The error branch for ext4_xattr_inode_update_ref forget to release the refcount for iloc.bh. Find this when review code.

Timeline

  1. CVE published
  2. CISA SSVC assessment

    Exploitation: none · Automatable: no · Technical impact: partial

  3. Record last updated

Affected versions

  • Linux Linux

    From 1cfb3e4ddbdc8e02e637b8852540bd4718bf4814 · fixed in 7c9f059c3d531a12d7ad96cd34a44b8af7c00d5f; From 505e69f76ac497e788f4ea0267826ec7266b40c8 · fixed in 6241cd1d0acc2363016ac55b8773ba1332dd59d7; From 3d6269028246f4484bfed403c947a114bb583631 · fixed in 3b00c16e42428a1ecd3a5eb9cc37f8ad9bd47626; From 79ea7f3e11effe1bd9e753172981d9029133a278 · fixed in 0b06cde92f2f960f4ebe3c988c69f2711f2a24dc; From 6b879c4c6bbaab03c0ad2a983953bd1410bb165e · fixed in 8e8542c539927ae3898a4d02941f84e252e2dea1; From 57295e835408d8d425bef58da5253465db3d6888 · fixed in 06e26287f2e349a28ad363941ffd9076bfed8b2e; From 57295e835408d8d425bef58da5253465db3d6888 · fixed in d250bdf531d9cd4096fedbb9f172bb2ca660c868; From 5.10.246 · fixed in 5.10.249; From 5.15.195 · fixed in 5.15.199; From 6.1.157 · fixed in 6.1.162; From 6.6.113 · fixed in 6.6.122; From 6.12.54 · fixed in 6.12.67; From 5.4.301 · fixed in 5.5; From 6.17.4 · fixed in 6.18

  • Linux Linux

    6.18

  • KernelLinux

    fixed in 5.10.249; From 5.11.0 · fixed in 5.15.199; From 5.16.0 · fixed in 6.1.162; From 6.2.0 · fixed in 6.6.122; From 6.7.0 · fixed in 6.12.67; From 6.13.0 · fixed in 6.18.7

References 7

git.kernel.org