CVE-2026-68422
btrfs: fix root leak if its reloc root is unexpected in merge_reloc_roots()
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
Summary
In the Linux kernel, the following vulnerability has been resolved: btrfs: fix root leak if its reloc root is unexpected in merge_reloc_roots() If we have an unexpected reloc_root for our root, we jump to the out label but never drop the reference we obtained for root, resulting in a leak. Add a missing btrfs_put_root() call.
Timeline
- CVE published
- Record last updated
Affected versions
- Linux Linux
Version range not reported
- Linux Linux
5.13
References 7
git.kernel.org
- stable/c/f89df93e8aefa4c1c813f835559f2ac727f79766
- stable/c/3f586b4c92e4272fcd01bf0db0590b63acf3e85b
- stable/c/b3d39b03799600c76c33486e2d29b73a771023db
- stable/c/72f673d1c1deb819554d3e7e154f6d84301eb735
- stable/c/60a23d4ea169e27403f3bb023bb98036797c0206
- stable/c/7591d1727067d6063247901ad25c4bdc4e5695c4
- stable/c/ce6050bafb4e33377dc17fcc357736bfc351180c