PT-2026-64577 · Linux · Linux
CVE-2026-64356
·
Published
2026-07-25
·
Updated
2026-07-25
None
No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
In the Linux kernel, the following vulnerability has been resolved:
xfs: fix memory leak in xfs dqinode metadir create()
If xfs metadir create() fails in xfs dqinode metadir create(), the current
code returns directly, leaking the allocated update and transaction state.
If the subsequent commit fails, the caller-owned inode reference is left
behind.
Fix this memory leak by routing the create failure path through
xfs metadir cancel(). For both create and commit failures, finish and
release any inode returned to the caller, mirroring the unwind pattern in
xfs metadir mkdir().
The bug was first flagged by an experimental analysis tool we are
developing for kernel memory-management bugs while analyzing
v6.13-rc1. The tool is still under development and is not yet publicly
available. Manual inspection confirms that the bug is still
present in v7.1.1.
An x86 64 allyesconfig build showed no new warnings. Runtime validation
used kprobe fault injection during
mount -o uquota on a metadir XFS
image. Injecting xfs metadir create() reproduced the old active-update path
that left mount stuck later in mount setup; after this change, the same
injection reported cancel hits=1 and irele hits=1. Injecting
xfs metadir commit() exercised the old inode-reference leak path; after
this change, it reported irele hits=1. Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Linux