Tracker / CVE-2026-46046
CVE-2026-46046
Medium 5.5
In the Linux kernel, the following vulnerability has been resolved: ext4: fix missing brelse() in ext4_xattr_inode_dec_ref_all() The commit c8e008b60492 ("ext4: ignore xattrs past end") introduced a refcount leak in when block_csum is false. ext4_xattr_inode_dec_ref_all() calls ext4_get_inode_loc() to get iloc.bh, but never releases it with brelse().
Affected products and versions
| linux | linux_kernel · 5.10.237 → 5.10.258 |
|---|---|
| linux | linux_kernel · 5.15.181 → 5.15.209 |
| linux | linux_kernel · 5.4.293 → 5.5 |
| linux | linux_kernel · 6.1.135 → 6.1.175 |
| linux | linux_kernel · 6.12.24 → 6.12.86 |
| linux | linux_kernel · 6.13.12 → 6.14 |
| linux | linux_kernel · 6.14.3 → 6.18.27 |
| linux | linux_kernel · 6.19 → 7.0.4 |
| linux | linux_kernel · 6.6.88 → 6.6.140 |
Analysis
This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.