CVE-2026-23145

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2026-23145
In the Linux kernel, the following vulnerability has been resolved: ext4: fix iloc.bh leak in ext4_xattr_inode_update_ref The error branch for ext4_xattr_inode_update_ref forget to release the refcount for iloc.bh. Find this when review code.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/06e26287f2e349a28ad363941ffd9076bfed8b2e Patch
https://git.kernel.org/stable/c/0b06cde92f2f960f4ebe3c988c69f2711f2a24dc Patch
https://git.kernel.org/stable/c/3b00c16e42428a1ecd3a5eb9cc37f8ad9bd47626 Patch
https://git.kernel.org/stable/c/6241cd1d0acc2363016ac55b8773ba1332dd59d7 Patch
https://git.kernel.org/stable/c/7c9f059c3d531a12d7ad96cd34a44b8af7c00d5f Patch
https://git.kernel.org/stable/c/8e8542c539927ae3898a4d02941f84e252e2dea1 Patch
https://git.kernel.org/stable/c/d250bdf531d9cd4096fedbb9f172bb2ca660c868 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*
History

17 Mar 2026, 21:13

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
First Time Linux
Linux linux Kernel
CWE CWE-401
References () https://git.kernel.org/stable/c/06e26287f2e349a28ad363941ffd9076bfed8b2e - () https://git.kernel.org/stable/c/06e26287f2e349a28ad363941ffd9076bfed8b2e - Patch
References () https://git.kernel.org/stable/c/0b06cde92f2f960f4ebe3c988c69f2711f2a24dc - () https://git.kernel.org/stable/c/0b06cde92f2f960f4ebe3c988c69f2711f2a24dc - Patch
References () https://git.kernel.org/stable/c/3b00c16e42428a1ecd3a5eb9cc37f8ad9bd47626 - () https://git.kernel.org/stable/c/3b00c16e42428a1ecd3a5eb9cc37f8ad9bd47626 - Patch
References () https://git.kernel.org/stable/c/6241cd1d0acc2363016ac55b8773ba1332dd59d7 - () https://git.kernel.org/stable/c/6241cd1d0acc2363016ac55b8773ba1332dd59d7 - Patch
References () https://git.kernel.org/stable/c/7c9f059c3d531a12d7ad96cd34a44b8af7c00d5f - () https://git.kernel.org/stable/c/7c9f059c3d531a12d7ad96cd34a44b8af7c00d5f - Patch
References () https://git.kernel.org/stable/c/8e8542c539927ae3898a4d02941f84e252e2dea1 - () https://git.kernel.org/stable/c/8e8542c539927ae3898a4d02941f84e252e2dea1 - Patch
References () https://git.kernel.org/stable/c/d250bdf531d9cd4096fedbb9f172bb2ca660c868 - () https://git.kernel.org/stable/c/d250bdf531d9cd4096fedbb9f172bb2ca660c868 - Patch
CPE cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*

18 Feb 2026, 17:52

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: ext4: corregir la fuga de iloc.bh en ext4_xattr_inode_update_ref La rama de error para ext4_xattr_inode_update_ref olvidó liberar el refcount para iloc.bh. Esto se encontró al revisar el código.

14 Feb 2026, 16:15

Type Values Removed Values Added
New CVE
Information

Published : 2026-02-14 16:15

Updated : 2026-03-17 21:13

NVD link : CVE-2026-23145

Mitre link : CVE-2026-23145

CVE.ORG link : CVE-2026-23145

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-401

Missing Release of Memory after Effective Lifetime