CVE-2026-98448 PUBLISHED

xfs: release orphanage dir inode if chown fails

Assigner: Linux
Reserved: 25.09.2026 Published: 18.10.2026 Updated: 18.10.2026

In the Linux kernel, the following vulnerability has been resolved:

xfs: release orphanage dir inode if chown fails

LOLLM points out that we leak the igrab'd reference to the orphanage directory inode if chowning it fails. Fix that.

Product Status

Vendor Linux
Product Linux
Versions Default: unaffected
  • affected from 1e58a8ccf2597c9259a8e71a2bffac5e11e12ea0 to 6b66b1a59df6c3f9b4ad9b39a32ca86170ade357 (excl.)
  • affected from 1e58a8ccf2597c9259a8e71a2bffac5e11e12ea0 to 6a65a68097a1903988b256d5b367da7b0863a1d5 (excl.)
  • affected from 1e58a8ccf2597c9259a8e71a2bffac5e11e12ea0 to f813aefd9e09c8cda38a71580b6a01552d97cade (excl.)
  • affected from 1e58a8ccf2597c9259a8e71a2bffac5e11e12ea0 to 1c32cdc986467eaffeedb6c5334852809555b82d (excl.)
Vendor Linux
Product Linux
Versions Default: affected
  • Version 6.10 is affected
  • unaffected from 0 to 6.10 (excl.)
  • unaffected from 6.12.112 to 6.12.* (incl.)
  • unaffected from 6.18.55 to 6.18.* (incl.)
  • unaffected from 7.2.9 to 7.2.* (incl.)
  • unaffected from 7.3-rc5 to * (incl.)

References