PT-2026-44287 · Linux · Linux Kernel

Published 2026-05-28 · Updated 2026-05-29 · CVE-2026-46164

Positive Technologies (AI Summary)

CVSS v3.1

7.0

High

Base vector

AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A double free issue exists in the Linux kernel within the create space info sub group() function. When kobject init and add() fails, the execution flow triggers kobject put(&sub group->kobj), which leads to space info release() and subsequently kfree(sub group). Upon returning to create space info sub group(), the error return from btrfs sysfs add space info type() triggers a second kfree(sub group) call, resulting in the memory being freed twice.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2026-46164

Affected Products

Linux Kernel

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2026-46164 · Security Note
• https://git.kernel.org/stable/c/14b22be1dd844383eb03af9b1ee3b6b25d32aeaf · Note
• https://git.kernel.org/stable/c/a7449edf96143f192606ec8647e3167e1ecbd728 · Note
• https://twitter.com/windowsforum/status/2060278760293732524 · Twitter Post
• https://git.kernel.org/stable/c/d2a675f2e238ec96c8e91e2718c1f910c9c8fb21 · Note
• https://git.kernel.org/stable/c/259af6857a1b4f1e9ef8b780353f9d11c26a22bd · Note
• https://git.kernel.org/stable/c/dfd05a16b5c9d1d98b47905f37f2fccda52173d1 · Note