CVE-2026-98448

CVE-2026-98448

published October 18, 2026

CVSS
—
EPSS
0%
Percentile
6.7
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

xfs: release orphanage dir inode if chown fails

LOLLM points out that we leak the igrab'd reference to the orphanage

directory inode if chowning it fails. Fix that.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00175 · 6.7th percentile
Published
2026-10-18T20:16Z
References (4)
https://git.kernel.org/stable/c/1c32cdc986467eaffeedb6c5334852809555b82d · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/6a65a68097a1903988b256d5b367da7b0863a1d5 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/6b66b1a59df6c3f9b4ad9b39a32ca86170ade357 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/f813aefd9e09c8cda38a71580b6a01552d97cade · 416baaa9-dc9f-4396-8d5f-8c081fb06d67
EPSS history
Timeline
  • 20 OCT 03:34Z
    EPSS moved — → 0%
    epss
  • 18 OCT 15:14Z
    xfs: release orphanage dir inode if chown fails
    cvelistv5
  • 18 OCT 15:14Z
    xfs: release orphanage dir inode if chown fails
    cvelistv5