CVE-2026-98448
Received Received - Intake

XFS Filesystem Orphanage Inode Leak in Linux Kernel

Publication date: 2026-10-18

Last updated on: 2026-10-18

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: xfs: release orphanage dir inode if chown fails LOLLM points out that we leak the igrab'd reference to the orphanage directory inode if chowning it fails. Fix that.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-18
Last Modified
2026-10-18
Generated
2026-10-18
AI Q&A
2026-10-18
EPSS Evaluated
N/A
NVD
CVE-2026-98448
EUVD
EUVD-2026-103688

Affected Vendors & Products

Showing 5 associated CPEs
Vendor Product Version / Range
Linux Linux 1e58a8ccf2597c9259a8e71a2bffac5e11e12ea0
Linux Linux 1e58a8ccf2597c9259a8e71a2bffac5e11e12ea0
Linux Linux 1e58a8ccf2597c9259a8e71a2bffac5e11e12ea0
Linux Linux 1e58a8ccf2597c9259a8e71a2bffac5e11e12ea0
Linux Linux 6.10

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in the Linux kernel involves a memory leak in the XFS file system. When a chown operation fails, the system does not properly release a reference to an inode of an orphaned directory, leading to a resource leak.

Detection Guidance

This vulnerability is specific to the Linux kernel's XFS filesystem and involves a reference leak in the orphanage directory inode when chown fails. Detection requires checking kernel logs for XFS-related errors or examining filesystem operations involving chown on XFS mounts. No direct commands are provided in the context, but monitoring for filesystem errors or kernel warnings related to XFS may help identify issues.

Impact Analysis

This vulnerability could lead to resource exhaustion over time, as leaked inodes consume memory and may cause system instability or crashes. It primarily affects systems using the XFS file system.

Mitigation Strategies

Apply the latest kernel update that includes the fix for this vulnerability. Monitor XFS filesystem operations and kernel logs for errors related to inode handling. Ensure proper error handling in scripts or applications that perform chown operations on XFS mounts to avoid orphaned references.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-98448. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart