{"id":"CVE-2026-99067","revision":"cf0eaa8f70f64c0d982664762f4f451d","records":[{"revision":"cf0eaa8f70f64c0d982664762f4f451d","observedAt":"2026-10-23T16:01:20.601+00:00","statement":{"source":"cve-program","id":"CVE-2026-99067","aliases":[],"title":"btrfs: scrub: fix local_root reference leak in scrub_print_warning_inode()","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nbtrfs: scrub: fix local_root reference leak in scrub_print_warning_inode()\n\nWhen paths_from_inode() fails, scrub_print_warning_inode() jumps to err\nwithout dropping the reference taken by btrfs_get_fs_root(), leaking a\nreference to the root every time path resolution fails while printing\nscrub warnings.  Every other error and success path of the function\ndrops the reference.\n\nDrop the reference on the paths_from_inode() failure path too.","state":0,"publishedAt":"2026-10-23T12:23:10.43+00:00","modifiedAt":"2026-10-23T12:23:10.43+00:00","affected":[{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"unaffected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"fs/btrfs/scrub.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"558540c17771eaf89b1a3be39aa2c8bc837da1a6\",\n                            \"lessThan\": \"41cabfbf3532e2a2a17be9e4876042a5393b5c8d\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"558540c17771eaf89b1a3be39aa2c8bc837da1a6\",\n                            \"lessThan\": \"452a435b74f7f598a343c51f7c89c5d2244384b6\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"558540c17771eaf89b1a3be39aa2c8bc837da1a6\",\n                            \"lessThan\": \"12ba7d8b9cd45a2c6aa8f37c3f4b8a50422fb549\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"558540c17771eaf89b1a3be39aa2c8bc837da1a6\",\n                            \"lessThan\": \"a7e5992bc37088f9b00e531955022aef69de3dc7\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"558540c17771eaf89b1a3be39aa2c8bc837da1a6\",\n                            \"lessThan\": \"1fd742c7479961da6d0bb794ef8ac6b7b9442847\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"affected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"fs/btrfs/scrub.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"3.2\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"0\",\n                            \"lessThan\": \"3.2\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.6.160\",\n                            \"lessThanOrEqual\": \"6.6.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.12.113\",\n                            \"lessThanOrEqual\": \"6.12.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.18.57\",\n                            \"lessThanOrEqual\": \"6.18.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"7.2.11\",\n                            \"lessThanOrEqual\": \"7.2.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"7.3\",\n                            \"lessThanOrEqual\": \"*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"original_commit_for_fix\"\n                        }\n                    ]\n                }"}],"metrics":[],"references":["https://git.kernel.org/stable/c/41cabfbf3532e2a2a17be9e4876042a5393b5c8d","https://git.kernel.org/stable/c/452a435b74f7f598a343c51f7c89c5d2244384b6","https://git.kernel.org/stable/c/12ba7d8b9cd45a2c6aa8f37c3f4b8a50422fb549","https://git.kernel.org/stable/c/a7e5992bc37088f9b00e531955022aef69de3dc7","https://git.kernel.org/stable/c/1fd742c7479961da6d0bb794ef8ac6b7b9442847"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-99067","license":"CVE Program Terms of Use","key":"cve-program:CVE-2026-99067","identifiers":["CVE-2026-99067"]},"retained":false,"historicalAffected":[]}],"coverage":[]}