CVE-2026-46005

Analyzed Analyzed - Analysis Complete

Resource Leak in Linux Kernel XFS

Publication date: 2026-05-27

Last updated on: 2026-06-19

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: xfs: fix a resource leak in xfs_alloc_buftarg() In the error path, call fs_put_dax() to drop the DAX device reference.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-05-27

Last Modified

2026-06-19

Generated

2026-07-06

AI Q&A

2026-05-27

EPSS Evaluated

2026-07-05

NVD

CVE-2026-46005

EUVD

EUVD-2026-32302

Affected Vendors & Products

Vendor	Product	Version / Range
linux	linux_kernel	From 6.7 (inc) to 6.12.86 (exc)
linux	linux_kernel	From 6.0 (inc) to 6.6.140 (exc)
linux	linux_kernel	From 6.13 (inc) to 6.18.27 (exc)
linux	linux_kernel	From 6.19 (inc) to 7.0.4 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-401	The product does not sufficiently track and release allocated memory after it has been used, making the memory unavailable for reallocation and reuse.

Attack-Flow Graph

Executive Summary

This vulnerability is a resource leak in the Linux kernel's XFS filesystem, specifically in the function xfs_alloc_buftarg().

The issue occurs in the error handling path where the function fs_put_dax() is not called to properly release the DAX device reference, leading to a resource leak.

Impact Analysis

A resource leak in the kernel can lead to increased memory or resource consumption over time, potentially causing system instability or degraded performance.

If the leaked resources accumulate, it might eventually lead to system crashes or denial of service conditions.

Hi! I’m here to help you understand CVE-2026-46005. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70