CVE-2026-68422 PUBLISHED

btrfs: fix root leak if its reloc root is unexpected in merge_reloc_roots()

Assigner: Linux
Reserved: 30.07.2026 Published: 10.08.2026 Updated: 10.08.2026

In the Linux kernel, the following vulnerability has been resolved:

btrfs: fix root leak if its reloc root is unexpected in merge_reloc_roots()

If we have an unexpected reloc_root for our root, we jump to the out label but never drop the reference we obtained for root, resulting in a leak. Add a missing btrfs_put_root() call.

Product Status

Vendor Linux
Product Linux
Versions Default: unaffected
  • affected from 24213fa46c7080c31d79aa2e3e2f0d9480cab700 to b3d39b03799600c76c33486e2d29b73a771023db (excl.)
  • affected from 24213fa46c7080c31d79aa2e3e2f0d9480cab700 to 72f673d1c1deb819554d3e7e154f6d84301eb735 (excl.)
  • affected from 24213fa46c7080c31d79aa2e3e2f0d9480cab700 to 60a23d4ea169e27403f3bb023bb98036797c0206 (excl.)
  • affected from 24213fa46c7080c31d79aa2e3e2f0d9480cab700 to 7591d1727067d6063247901ad25c4bdc4e5695c4 (excl.)
  • affected from 24213fa46c7080c31d79aa2e3e2f0d9480cab700 to ce6050bafb4e33377dc17fcc357736bfc351180c (excl.)
Vendor Linux
Product Linux
Versions Default: affected
  • Version 5.13 is affected
  • unaffected from 0 to 5.13 (excl.)
  • unaffected from 6.6.148 to 6.6.* (incl.)
  • unaffected from 6.12.101 to 6.12.* (incl.)
  • unaffected from 6.18.42 to 6.18.* (incl.)
  • unaffected from 7.1.6 to 7.1.* (incl.)
  • unaffected from 7.2-rc4 to * (incl.)

References