PT-2026-61463 · Linux · Linux
CVE-2026-64146
·
Published
2026-07-19
·
Updated
2026-07-19
None
No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
In the Linux kernel, the following vulnerability has been resolved:
erofs: fix metabuf leak in inode xattr initialization
commit bb88e8da0025 ("erofs: use meta buffers for xattr operations")
converted xattr operations to use on-stack erofs buf instances.
erofs init inode xattrs() uses such a metabuf while reading the inline
xattr header and shared xattr id array.
Some error paths after erofs read metabuf() leave through out unlock
without dropping the metabuf, so the folio reference can leak.
Consolidate the cleanup at out unlock. erofs put metabuf() is a
no-op if no folio has been acquired, and this keeps all paths after
taking EROFS I BL XATTR BIT covered by a single cleanup site.
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Linux