CVE-2026-68450: btrfs: free mapping node on duplicate reloc root insert
In the Linux kernel, the following vulnerability has been resolved:
btrfs: free mapping node on duplicate reloc root insert
addrelocroot() allocates a mappingnode before inserting it into rc->relocroottree. If rbsimpleinsert() finds an existing entry, it returns the existing rbnode and leaves the newly allocated node unlinked.
The error path then returns -EEXIST without freeing the new node. Since the node was never inserted into relocroottree, the later cleanup in putreloccontrol() cannot find it either.
Free the newly allocated node before returning -EEXIST.
The callers currently assert that -EEXIST should not happen, so this is a defensive cleanup for an unexpected duplicate insert path. If the path is ever reached, the local allocation should still be released.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-68450?
CVE-2026-68450 is classified with a risk score of 2.
How do I fix CVE-2026-68450?
To fix CVE-2026-68450, ensure you update to the latest version of the Linux kernel that contains the patch for this vulnerability.
What systems are affected by CVE-2026-68450?
CVE-2026-68450 affects the btrfs filesystem component of the Linux kernel.
Can CVE-2026-68450 lead to data loss?
There is potential for data integrity issues in systems running affected versions of the Linux kernel if CVE-2026-68450 is exploited.
What are the symptoms of CVE-2026-68450 exploitation?
Symptoms of CVE-2026-68450 exploitation may include unexpected system behavior related to btrfs filesystem operations.