CVE-2026-68422

Not scored yetLast modified Nov 6, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

btrfs: fix root leak if its reloc root is unexpected in merge_reloc_roots()

If we have an unexpected reloc_root for our root, we jump to the out label but never drop the reference we obtained for root, resulting in a leak. Add a missing btrfs_put_root() call.

Metrics

No CVSS score has been published yet.

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

VendorProductVersions
LinuxLinux>= 24213fa46c7080c31d79aa2e3e2f0d9480cab700, < f89df93e8aefa4c1c813f835559f2ac727f79766; >= 24213fa46c7080c31d79aa2e3e2f0d9480cab700, < 3f586b4c92e4272fcd01bf0db0590b63acf3e85b; >= 24213fa46c7080c31d79aa2e3e2f0d9480cab700, < b3d39b03799600c76c33486e2d29b73a771023db; >= 24213fa46c7080c31d79aa2e3e2f0d9480cab700, < 72f673d1c1deb819554d3e7e154f6d84301eb735; >= 24213fa46c7080c31d79aa2e3e2f0d9480cab700, < 60a23d4ea169e27403f3bb023bb98036797c0206; >= 24213fa46c7080c31d79aa2e3e2f0d9480cab700, < 7591d1727067d6063247901ad25c4bdc4e5695c4; >= 24213fa46c7080c31d79aa2e3e2f0d9480cab700, < ce6050bafb4e33377dc17fcc357736bfc351180c
LinuxLinux5.13

References

Timeline

Published
Aug 10, 2026
Last modified
Nov 6, 2026
NVD status
Received

Related CVEs from 2026

CVE-2026-68423In the Linux kernel, the following vulnerability has been resolved: mtd: virt_concat: fix use-after-free in mtd_virt_concat_destroy() mtd_CVE-2026-68424In the Linux kernel, the following vulnerability has been resolved: mtd: virt_concat: fix use-after-free in mtd_virt_concat_destroy_joins()CVE-2026-684257.1In the Linux kernel, the following vulnerability has been resolved: IB/mad: Drop unmatched RMPP responses before reassembly Kernel-handledCVE-2026-684269.8In the Linux kernel, the following vulnerability has been resolved: xfrm: fix stale skb->prev after async crypto steals a GSO segment skb_CVE-2026-684277.8In the Linux kernel, the following vulnerability has been resolved: gpu: host1x: Fix use-after-free in host1x_bo_clear_cached_mappings __hCVE-2026-68428In the Linux kernel, the following vulnerability has been resolved: KVM: x86/mmu: Fix use-after-free on vendor module reload mmu_destroy_cCVE-2026-68429In the Linux kernel, the following vulnerability has been resolved: drm/dp_mst: Handle torn-down topology gracefully in drm_dp_mst_topologyCVE-2026-68435.5A flaw was found in nano. A local user could exploit a format string vulnerability in the `statusline()` function. By creating a directory wCVE-2026-68430In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/gfx8: drop unecessary BUG_ON() There's no need to crash theCVE-2026-684319.1In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate minimum PDU size for transform requests The receive paCVE-2026-684328.8In the Linux kernel, the following vulnerability has been resolved: vxlan: require CAP_NET_ADMIN in the device netns for changelink A tunnCVE-2026-684338.6In the Linux kernel, the following vulnerability has been resolved: libceph: bound get_version reply decode to front len handle_get_versio
CVE-2026-68422: Unscored | Vulnix