CVE-2026-23145: ext4: fix iloc.bh leak in ext4_xattr_inode_update_ref
Published Feb 14, 2026
·Updated
In the Linux kernel, the following vulnerability has been resolved:
ext4: fix iloc.bh leak in ext4xattrinodeupdateref
The error branch for ext4xattrinodeupdateref forget to release the refcount for iloc.bh. Find this when review code.
Affected Software
13 affected components
Linux Linux kernel
Linux Linux kernel>=5.4.301<5.5
Linux Linux kernel>=5.10.246<5.10.249
Linux Linux kernel>=5.15.195<5.15.199
Linux Linux kernel>=6.1.157<6.1.162
Linux Linux kernel>=6.6.113<6.6.122
Linux Linux kernel>=6.12.54<6.12.67
Linux Linux kernel>=6.17.4<6.18.7
Linux Linux kernel=6.19-rc1
Linux Linux kernel=6.19-rc2
Linux Linux kernel=6.19-rc3
Linux Linux kernel=6.19-rc4
Linux Linux kernel=6.19-rc5
Event History
Feb 14, 2026
CVE Published
via MITRE·03:36 PM
Data Sourced
via MITRE·03:36 PM
Description
Data Sourced
via NVD·04:15 PM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2026-23145?
The severity of CVE-2026-23145 is medium with a CVSS score of 5.5.
2
How do I fix CVE-2026-23145?
To fix CVE-2026-23145, apply the available patch provided for the Linux kernel.
3
What component is affected by CVE-2026-23145?
CVE-2026-23145 affects the ext4 filesystem implementation in the Linux kernel.
4
What is the impact of CVE-2026-23145?
The impact of CVE-2026-23145 is related to a refcount leak, which may lead to resource exhaustion.
5
When was CVE-2026-23145 published?
CVE-2026-23145 was published on February 14, 2026.