CVE-2025-71268CWE-401CWE-772

CVE-2025-71268

High · published March 18, 2026

CVSS v3.1
7.5
EPSS
0%
Percentile
12.8
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

btrfs: fix reservation leak in some error paths when inserting inline extent

If we fail to allocate a path or join a transaction, we return from

__cow_file_range_inline() without freeing the reserved qgroup data,

resulting in a leak. Fix this by ensuring we call btrfs_qgroup_free_data()

in such cases.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00228 · 12.8th percentile
Weaknesses
CWE-401 · Missing Release of Memory after Effective Lifetime; CWE-772 · Missing Release of Resource after Effective Lifetime
Published
2026-03-18T22:16Z
Affected products (8)
ProductVersionsFixed in
linux/linux_kernel≥ 4.4, < 6.1.1636.1.163
linux/linux_kernel≥ 6.2, < 6.6.1246.6.124
linux/linux_kernel≥ 6.7, < 6.12.706.12.70
linux/linux_kernel≥ 6.13, < 6.18.106.18.10
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
References (5)
https://git.kernel.org/stable/c/28768bd3abf9995a93f6e01bfce01c60622964dd · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/28b97fcbbf523779688e8de5fe55bf2dae3859f6 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/c1c050f92d8f6aac4e17f7f2230160794fceef0c · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/f3ee1732851aec6fe6b2cec2ef1b32d4e71d9913 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/f7156512c8166d385f574b9ec030479aa7b1e8c9 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67
EPSS history
Timeline
  • 18 MAR 17:40Z
    btrfs: fix reservation leak in some error paths when inserting inline extent
    cvelistv5