PT-2026-26111 · Linux+3 · Linux Kernel+3

Published 2025-01-01 · Updated 2026-05-22 · CVE-2025-71268

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A flaw exists in the Linux kernel related to a reservation leak within the btrfs file system when inserting inline extents. Specifically, if allocation of a path or joining a transaction fails during the cow file range inline() function, reserved qgroup data is not freed, leading to a memory leak. The issue is addressed by ensuring the btrfs qgroup free data() function is called in these error scenarios.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Memory Leak

Missing Release of Resource after Effective Lifetime

Weakness Enumeration

CWE-401

CWE-772

Related Identifiers

BDU:2026-04244

CVE-2025-71268

OPENSUSE-SU-2026:20826-1

SUSE-SU-2026:1573-1

SUSE-SU-2026:1661-1

SUSE-SU-2026:1668-1

SUSE-SU-2026:21114-1

SUSE-SU-2026:21123-1

SUSE-SU-2026:21255-1

SUSE-SU-2026:21841-1

USN-8278-1

USN-8289-1

USN-8296-1

Affected Products

Linuxmint

Linux Kernel

Ubuntu

Btrfs

References · 386

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/71xxx/CVE-2025-71268.json · Exploit
• https://ubuntu.com/security/CVE-2024-58097 · Vendor Advisory
• https://git.kernel.org/stable/c/28768bd3abf9995a93f6e01bfce01c60622964dd · Patch
• https://ubuntu.com/security/CVE-2026-23351 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-23164 · Vendor Advisory
• https://git.kernel.org/stable/c/f7156512c8166d385f574b9ec030479aa7b1e8c9 · Patch
• https://ubuntu.com/security/CVE-2026-23123 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-23131 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-22980 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-71199 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-23001 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-23159 · Vendor Advisory
• https://osv.dev/vulnerability/ROOT-OS-UBUNTU-2404-CVE-2025-71268 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:21255-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-23085 · Vendor Advisory