CVE-2026-46046

MediumCVSS 5.5/10Last modified Nov 10, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

ext4: fix missing brelse() in ext4_xattr_inode_dec_ref_all()

The commit c8e008b60492 ("ext4: ignore xattrs past end") introduced a refcount leak in when block_csum is false.

ext4_xattr_inode_dec_ref_all() calls ext4_get_inode_loc() to get iloc.bh, but never releases it with brelse().

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected software

VendorProductVersions
LinuxLinux>= 76c365fa7e2a8bb85f0190cdb4b8cdc99b2fdce3, < dd98a5603a212ea9c96c6982ccdbcc748fdb9a56; >= f737418b6de31c962c7192777ee4018906975383, < 153ab2c52355fbebcae622db8e7b506492c73a29; >= cf9291a3449b04688b81e32621e88de8f4314b54, < b706d00206a9e82362a9633efbd8b5775650169b; >= 362a90cecd36e8a5c415966d0b75b04a0270e4dd, < 1bc1107a3a403a6d440673ed6666f7b07ef868a8; >= eb59cc31b6ea076021d14b04e7faab1636b87d0e, < 097227f1ffe1a85bc3c359f81c71e3d40e06e920; >= c8e008b60492cf6fd31ef127aea6d02fd3d314cd, < 1e6b0a69bf2c9c819255c7566e4355536d81d9cf; >= c8e008b60492cf6fd31ef127aea6d02fd3d314cd, < f072906688933bf47fabbaf63560be03357c8298; >= c8e008b60492cf6fd31ef127aea6d02fd3d314cd, < 77d059519382bd66283e6a4e83ee186e87e7708f; 6aff941cb0f7d0c897c3698ad2e30672709135e3; 3bc6317033f365ce578eb6039445fb66162722fd; 836e625b03a666cf93ff5be328c8cb30336db872; >= 5.10.237, < 5.10.258; >= 5.15.181, < 5.15.209; >= 6.1.135, < 6.1.175; >= 6.6.88, < 6.6.140; >= 6.12.24, < 6.12.86; >= 5.4.293, < 5.5; >= 6.13.12, < 6.14; >= 6.14.3, < 6.15
LinuxLinux6.15
SiemensSIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AB0)>= V3.1.6, < *
SiemensSIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AB0)>= V3.1.7, < *
SiemensSIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AC0)>= V3.1.6, < *
SiemensSIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AC0)>= V3.1.7, < *
SiemensSIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (6ES7518-4FX00-1AB0)>= V3.1.6, < *
SiemensSIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (6ES7518-4FX00-1AB0)>= V3.1.7, < *
SiemensSIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (6ES7518-4FX00-1AC0)>= V3.1.6, < *
SiemensSIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (6ES7518-4FX00-1AC0)>= V3.1.7, < *
SiemensSIMATIC S7-1500 TM MFP - GNU/Linux subsystem< *
SiemensSIPLUS S7-1500 CPU 1518-4 PN/DP MFP (6AG1518-4AX00-4AC0)>= V3.1.6, < *
SiemensSIPLUS S7-1500 CPU 1518-4 PN/DP MFP (6AG1518-4AX00-4AC0)>= V3.1.7, < *

References

Timeline

Published
May 27, 2026
Last modified
Nov 10, 2026
NVD status
Modified

Related CVEs from 2026

CVE-2026-460477.8In the Linux kernel, the following vulnerability has been resolved: net: qrtr: ns: Fix use-after-free in driver remove() In the remove calCVE-2026-460485.5In the Linux kernel, the following vulnerability has been resolved: ALSA: caiaq: fix usb_dev refcount leak on probe failure create_card() CVE-2026-460495.5In the Linux kernel, the following vulnerability has been resolved: ALSA: ctxfi: Add fallback to default RSR for S/PDIF spdif_passthru_plaCVE-2026-460505.5In the Linux kernel, the following vulnerability has been resolved: md/raid10: fix deadlock with check operation and nowait requests When CVE-2026-460515.5In the Linux kernel, the following vulnerability has been resolved: md/raid5: fix soft lockup in retry_aligned_read() When retry_aligned_rCVE-2026-460527.5In the Linux kernel, the following vulnerability has been resolved: ceph: only d_add() negative dentries when they are unhashed Ceph can cCVE-2026-460537.8In the Linux kernel, the following vulnerability has been resolved: net: rds: fix MR cleanup on copy error __rds_rdma_map() hands sg/pagesCVE-2026-460547.1In the Linux kernel, the following vulnerability has been resolved: selinux: fix overlayfs mmap() and mprotect() access checks The existinCVE-2026-460557.1In the Linux kernel, the following vulnerability has been resolved: apparmor: Fix string overrun due to missing termination When booting UCVE-2026-460568.8In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_event: fix potential UAF in SSP passkey handlers hci_coCVE-2026-460573.3In the Linux kernel, the following vulnerability has been resolved: landlock: Fix LOG_SUBDOMAINS_OFF inheritance across fork() hook_cred_tCVE-2026-460587.8In the Linux kernel, the following vulnerability has been resolved: media: amphion: Fix race between m2m job_abort and device_run Fix kern