CVE-2026-46005

MediumCVSS 5.5/10Last modified Nov 6, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

xfs: fix a resource leak in xfs_alloc_buftarg()

In the error path, call fs_put_dax() to drop the DAX device reference.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-401

Affected software

VendorProductVersions
LinuxLinux>= 6f643c57d57c56d4677bc05f1fca2ef3f249797c, < ed2d6442e61169e565727ba15c4f6a0cb5ce16df; >= 6f643c57d57c56d4677bc05f1fca2ef3f249797c, < 82fb9da6477d08bdab954dc7bc081a41f2f9cae6; >= 6f643c57d57c56d4677bc05f1fca2ef3f249797c, < 28a6c132b8c6e5eeefa889c4fb43d65b12989d48; >= 6f643c57d57c56d4677bc05f1fca2ef3f249797c, < 5c293a1e1ef0f838772d20ae8afae4cbd87cd3f9; >= 6f643c57d57c56d4677bc05f1fca2ef3f249797c, < 5804cb507233ed767a83ac70527b2f6c4566ec75; >= 6f643c57d57c56d4677bc05f1fca2ef3f249797c, < 29a7b2614357393b176ef06ba5bc3ff5afc8df69
LinuxLinux6.0

References

Timeline

Published
May 27, 2026
Last modified
Nov 6, 2026
NVD status
Modified

Related CVEs from 2026

CVE-2026-460067.8In the Linux kernel, the following vulnerability has been resolved: drm/nouveau: fix u32 overflow in pushbuf reloc bounds check nouveau_geCVE-2026-460075.5In the Linux kernel, the following vulnerability has been resolved: hwmon: (powerz) Avoid cacheline sharing for DMA buffer Depending on thCVE-2026-460084.7In the Linux kernel, the following vulnerability has been resolved: mm/damon/core: fix damos_walk() vs kdamond_fn() exit race When kdamondCVE-2026-460095.5In the Linux kernel, the following vulnerability has been resolved: PCI: endpoint: pci-epf-ntb: Remove duplicate resource teardown epf_ntbCVE-2026-46019.1Versions of the package jsrsasign before 11.1.1 are vulnerable to Missing Cryptographic Step via the KJUR.crypto.DSA.signWithMessageHash proCVE-2026-460108.1In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix error handling in rxgk_extract_token() Fix a missing bit ofCVE-2026-460117.8In the Linux kernel, the following vulnerability has been resolved: media: mtk-jpeg: fix use-after-free in release path due to uncancelled CVE-2026-460125.5In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix memory leaks in rxkad_verify_response() Fix rxkad_verify_reCVE-2026-460135.5In the Linux kernel, the following vulnerability has been resolved: mm/memfd_luo: fix physical address conversion in put_folios cleanup InCVE-2026-460145.5In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: Add missing save/restore handling of LBR MSRs MSR_IA32_DEBUGCVE-2026-460157.8In the Linux kernel, the following vulnerability has been resolved: tcp: call sk_data_ready() after listener migration When inet_csk_listeCVE-2026-460165.5In the Linux kernel, the following vulnerability has been resolved: remoteproc: xlnx: Only access buffer information if IPI is buffered In
CVE-2026-46005: Medium severity, CVSS 5.5 | Vulnix