{"id":"CVE-2026-23145","revision":"80515d0312a647fa8460a6ba7c907290","records":[{"revision":"80515d0312a647fa8460a6ba7c907290","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2026-23145","aliases":[],"title":"ext4: fix iloc.bh leak in ext4_xattr_inode_update_ref","description":"In the Linux kernel, the following vulnerability has been resolved:\n\next4: fix iloc.bh leak in ext4_xattr_inode_update_ref\n\nThe error branch for ext4_xattr_inode_update_ref forget to release the\nrefcount for iloc.bh. Find this when review code.","state":0,"publishedAt":"2026-02-14T15:36:10.207+00:00","modifiedAt":"2026-10-19T18:25:33.284+00:00","affected":[{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"unaffected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"fs/ext4/xattr.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"1cfb3e4ddbdc8e02e637b8852540bd4718bf4814\",\n                            \"lessThan\": \"7c9f059c3d531a12d7ad96cd34a44b8af7c00d5f\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"505e69f76ac497e788f4ea0267826ec7266b40c8\",\n                            \"lessThan\": \"6241cd1d0acc2363016ac55b8773ba1332dd59d7\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"3d6269028246f4484bfed403c947a114bb583631\",\n                            \"lessThan\": \"3b00c16e42428a1ecd3a5eb9cc37f8ad9bd47626\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"79ea7f3e11effe1bd9e753172981d9029133a278\",\n                            \"lessThan\": \"0b06cde92f2f960f4ebe3c988c69f2711f2a24dc\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"6b879c4c6bbaab03c0ad2a983953bd1410bb165e\",\n                            \"lessThan\": \"8e8542c539927ae3898a4d02941f84e252e2dea1\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"57295e835408d8d425bef58da5253465db3d6888\",\n                            \"lessThan\": \"06e26287f2e349a28ad363941ffd9076bfed8b2e\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"57295e835408d8d425bef58da5253465db3d6888\",\n                            \"lessThan\": \"d250bdf531d9cd4096fedbb9f172bb2ca660c868\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"ea39e712c2f5ae148ee5515798ae03523673e002\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"440b003f449a4ff2a00b08c8eab9ba5cd28f3943\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"5.10.246\",\n                            \"lessThan\": \"5.10.249\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"5.15.195\",\n                            \"lessThan\": \"5.15.199\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.1.157\",\n                            \"lessThan\": \"6.1.162\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.6.113\",\n                            \"lessThan\": \"6.6.122\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.12.54\",\n                            \"lessThan\": \"6.12.67\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"5.4.301\",\n                            \"lessThan\": \"5.5\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.17.4\",\n                            \"lessThan\": \"6.18\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"semver\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"affected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"fs/ext4/xattr.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"6.18\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"0\",\n                            \"lessThan\": \"6.18\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"5.10.249\",\n                            \"lessThanOrEqual\": \"5.10.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"5.15.199\",\n                            \"lessThanOrEqual\": \"5.15.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.1.162\",\n                            \"lessThanOrEqual\": \"6.1.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.6.122\",\n                            \"lessThanOrEqual\": \"6.6.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.12.67\",\n                            \"lessThanOrEqual\": \"6.12.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.18.7\",\n                            \"lessThanOrEqual\": \"6.18.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.19\",\n                            \"lessThanOrEqual\": \"*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"original_commit_for_fix\"\n                        }\n                    ]\n                }"}],"metrics":[],"references":["https://git.kernel.org/stable/c/7c9f059c3d531a12d7ad96cd34a44b8af7c00d5f","https://git.kernel.org/stable/c/6241cd1d0acc2363016ac55b8773ba1332dd59d7","https://git.kernel.org/stable/c/3b00c16e42428a1ecd3a5eb9cc37f8ad9bd47626","https://git.kernel.org/stable/c/0b06cde92f2f960f4ebe3c988c69f2711f2a24dc","https://git.kernel.org/stable/c/8e8542c539927ae3898a4d02941f84e252e2dea1","https://git.kernel.org/stable/c/06e26287f2e349a28ad363941ffd9076bfed8b2e","https://git.kernel.org/stable/c/d250bdf531d9cd4096fedbb9f172bb2ca660c868"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-23145","license":"CVE Program Terms of Use","key":"cve-program:CVE-2026-23145","identifiers":["CVE-2026-23145"]},"retained":false,"historicalAffected":[]}],"coverage":[]}