Medium · published May 27, 2026
In the Linux kernel, the following vulnerability has been resolved:
ext4: fix missing brelse() in ext4_xattr_inode_dec_ref_all()
The commit c8e008b60492 ("ext4: ignore xattrs past end")
introduced a refcount leak in when block_csum is false.
ext4_xattr_inode_dec_ref_all() calls ext4_get_inode_loc() to
get iloc.bh, but never releases it with brelse().
| Product | Versions | Fixed in |
|---|---|---|
| linux/linux_kernel | ≥ 5.4.293, < 5.5 | 5.5 |
| linux/linux_kernel | ≥ 5.10.237, < 5.10.258 | 5.10.258 |
| linux/linux_kernel | ≥ 5.15.181, < 5.15.209 | 5.15.209 |
| linux/linux_kernel | ≥ 6.1.135, < 6.1.175 | 6.1.175 |
| linux/linux_kernel | ≥ 6.6.88, < 6.6.140 | 6.6.140 |
| linux/linux_kernel | ≥ 6.12.24, < 6.12.86 | 6.12.86 |
| linux/linux_kernel | ≥ 6.13.12, < 6.14 | 6.14 |
| linux/linux_kernel | ≥ 6.14.3, < 6.18.27 | 6.18.27 |
| linux/linux_kernel | ≥ 6.19, < 7.0.4 | 7.0.4 |