PT-2026-64577 · Linux · Linux
CVE-2026-64356
·
Publicado
2026-07-25
·
Atualizado
2026-07-25
Nenhuma
Não há classificações de severidade ou métricas disponíveis. Quando houver, atualizaremos as informações correspondentes na página.
In the Linux kernel, the following vulnerability has been resolved:
xfs: fix memory leak in xfs dqinode metadir create()
If xfs metadir create() fails in xfs dqinode metadir create(), the current
code returns directly, leaking the allocated update and transaction state.
If the subsequent commit fails, the caller-owned inode reference is left
behind.
Fix this memory leak by routing the create failure path through
xfs metadir cancel(). For both create and commit failures, finish and
release any inode returned to the caller, mirroring the unwind pattern in
xfs metadir mkdir().
The bug was first flagged by an experimental analysis tool we are
developing for kernel memory-management bugs while analyzing
v6.13-rc1. The tool is still under development and is not yet publicly
available. Manual inspection confirms that the bug is still
present in v7.1.1.
An x86 64 allyesconfig build showed no new warnings. Runtime validation
used kprobe fault injection during
mount -o uquota on a metadir XFS
image. Injecting xfs metadir create() reproduced the old active-update path
that left mount stuck later in mount setup; after this change, the same
injection reported cancel hits=1 and irele hits=1. Injecting
xfs metadir commit() exercised the old inode-reference leak path; after
this change, it reported irele hits=1. Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Linux