CVE-2026-68422
Received Received - Intake

Btrfs Root Leak in Linux Kernel

Vulnerability report for CVE-2026-68422, including description, CVSS score, EPSS score, affected products, exploitability, helpful resources, and attack-flow context.

Publication date: 2026-08-10

Last updated on: 2026-08-10

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix root leak if its reloc root is unexpected in merge_reloc_roots() If we have an unexpected reloc_root for our root, we jump to the out label but never drop the reference we obtained for root, resulting in a leak. Add a missing btrfs_put_root() call.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-10
Last Modified
2026-08-10
Generated
2026-08-10
AI Q&A
2026-08-10
EPSS Evaluated
N/A
NVD
EUVD

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
linux kernel *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is a memory leak vulnerability in the Linux kernel's Btrfs filesystem. It occurs when a root filesystem has an unexpected relocation root during a merge operation. The code fails to release a reference to the root, causing a memory leak.

Detection Guidance

This vulnerability is specific to the Linux kernel's btrfs filesystem and does not have a direct network detection method. Detection involves checking kernel logs for btrfs-related errors or monitoring for unexpected memory leaks in kernel memory usage. Commands like dmesg | grep btrfs or checking /var/log/kern.log for btrfs errors may help identify issues.

Impact Analysis

The impact is primarily on system stability and resource usage. A memory leak can gradually consume available memory, leading to performance degradation or system crashes over time if the affected operation is performed repeatedly.

Mitigation Strategies

Apply the latest kernel update that includes the fix for this btrfs vulnerability. Reboot the system to load the updated kernel. If immediate patching is not possible, consider disabling btrfs features temporarily or monitoring filesystem operations closely for signs of root leaks.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-68422. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart