-

CVE-2026-43066

ext4: fix iloc.bh leak in ext4_fc_replay_inode() error paths

In the Linux kernel, the following vulnerability has been resolved:

ext4: fix iloc.bh leak in ext4_fc_replay_inode() error paths

During code review, Joseph found that ext4_fc_replay_inode() calls
ext4_get_fc_inode_loc() to get the inode location, which holds a
reference to iloc.bh that must be released via brelse().

However, several error paths jump to the 'out' label without
releasing iloc.bh:

 - ext4_handle_dirty_metadata() failure
 - sync_dirty_buffer() failure
 - ext4_mark_inode_used() failure
 - ext4_iget() failure

Fix this by introducing an 'out_brelse' label placed just before
the existing 'out' label to ensure iloc.bh is always released.

Additionally, make ext4_fc_replay_inode() propagate errors
properly instead of always returning 0.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version 8016e29f4362e285f0f7e38fadc61a5b7bdfdfa2
Version < 0892f12cd49fde5d5db68137923db107f894f3a3
Status affected
Version 8016e29f4362e285f0f7e38fadc61a5b7bdfdfa2
Version < 5a63033696e60b5d70816f1d119645ac5b0b0a03
Status affected
Version 8016e29f4362e285f0f7e38fadc61a5b7bdfdfa2
Version < 9c90449a9ac2cd1ba540ad2561b8b70c1bfb0a25
Status affected
Version 8016e29f4362e285f0f7e38fadc61a5b7bdfdfa2
Version < ca99cbcc316cdfd2040cc2b13d1426ccb3b3b50b
Status affected
Version 8016e29f4362e285f0f7e38fadc61a5b7bdfdfa2
Version < 19782b4c793b49a6aa4abbb307ddff3610009d21
Status affected
Version 8016e29f4362e285f0f7e38fadc61a5b7bdfdfa2
Version < f7817ad399d604e8639005d87d148b5ec626ad26
Status affected
Version 8016e29f4362e285f0f7e38fadc61a5b7bdfdfa2
Version < c426231e3d51916e83b6d1ab7ed8a65e83bca5b4
Status affected
Version 8016e29f4362e285f0f7e38fadc61a5b7bdfdfa2
Version < ec0a7500d8eace5b4f305fa0c594dd148f0e8d29
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 5.10
Status affected
Version 0
Version < 5.10
Status unaffected
Version <= 5.10.*
Version 5.10.253
Status unaffected
Version <= 5.15.*
Version 5.15.203
Status unaffected
Version <= 6.1.*
Version 6.1.168
Status unaffected
Version <= 6.6.*
Version 6.6.131
Status unaffected
Version <= 6.12.*
Version 6.12.80
Status unaffected
Version <= 6.18.*
Version 6.18.21
Status unaffected
Version <= 6.19.*
Version 6.19.11
Status unaffected
Version <= *
Version 7.0
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.03% 0.093
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Es wurden noch keine Informationen zu CWE veröffentlicht.