CVE-2026-64146: erofs: fix metabuf leak in inode xattr initialization
In the Linux kernel, the following vulnerability has been resolved:
erofs: fix metabuf leak in inode xattr initialization
commit bb88e8da0025 ("erofs: use meta buffers for xattr operations") converted xattr operations to use on-stack erofsbuf instances. erofsinitinodexattrs() uses such a metabuf while reading the inline xattr header and shared xattr id array.
Some error paths after erofsreadmetabuf() leave through outunlock without dropping the metabuf, so the folio reference can leak.
Consolidate the cleanup at outunlock. erofsputmetabuf() is a no-op if no folio has been acquired, and this keeps all paths after taking EROFSIBLXATTRBIT covered by a single cleanup site.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch bb88e8da0025
Event History
Frequently Asked Questions
What is the severity of CVE-2026-64146?
The severity of CVE-2026-64146 is rated at 15.
How do I fix CVE-2026-64146?
To fix CVE-2026-64146, update your Linux kernel to the patched version that includes the changes made in commit bb88e8da0025.
What systems are affected by CVE-2026-64146?
CVE-2026-64146 affects systems running vulnerable versions of the Linux kernel that utilize erofs for file systems.
What does CVE-2026-64146 address in the Linux kernel?
CVE-2026-64146 addresses a metabuf leak issue in the inode xattr initialization process in the Linux kernel.
When was CVE-2026-64146 published?
CVE-2026-64146 was published on July 19, 2026.