{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-23145", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2026-01-13T15:37:45.974Z", "datePublished": "2026-02-14T15:36:10.207Z", "dateUpdated": "2026-05-11T22:01:04.725Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-05-11T22:01:04.725Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\next4: fix iloc.bh leak in ext4_xattr_inode_update_ref\n\nThe error branch for ext4_xattr_inode_update_ref forget to release the\nrefcount for iloc.bh. Find this when review code."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["fs/ext4/xattr.c"], "versions": [{"version": "1cfb3e4ddbdc8e02e637b8852540bd4718bf4814", "lessThan": "7c9f059c3d531a12d7ad96cd34a44b8af7c00d5f", "status": "affected", "versionType": "git"}, {"version": "505e69f76ac497e788f4ea0267826ec7266b40c8", "lessThan": "6241cd1d0acc2363016ac55b8773ba1332dd59d7", "status": "affected", "versionType": "git"}, {"version": "3d6269028246f4484bfed403c947a114bb583631", "lessThan": "3b00c16e42428a1ecd3a5eb9cc37f8ad9bd47626", "status": "affected", "versionType": "git"}, {"version": "79ea7f3e11effe1bd9e753172981d9029133a278", "lessThan": "0b06cde92f2f960f4ebe3c988c69f2711f2a24dc", "status": "affected", "versionType": "git"}, {"version": "6b879c4c6bbaab03c0ad2a983953bd1410bb165e", "lessThan": "8e8542c539927ae3898a4d02941f84e252e2dea1", "status": "affected", "versionType": "git"}, {"version": "57295e835408d8d425bef58da5253465db3d6888", "lessThan": "06e26287f2e349a28ad363941ffd9076bfed8b2e", "status": "affected", "versionType": "git"}, {"version": "57295e835408d8d425bef58da5253465db3d6888", "lessThan": "d250bdf531d9cd4096fedbb9f172bb2ca660c868", "status": "affected", "versionType": "git"}, {"version": "ea39e712c2f5ae148ee5515798ae03523673e002", "status": "affected", "versionType": "git"}, {"version": "440b003f449a4ff2a00b08c8eab9ba5cd28f3943", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["fs/ext4/xattr.c"], "versions": [{"version": "6.18", "status": "affected"}, {"version": "0", "lessThan": "6.18", "status": "unaffected", "versionType": "semver"}, {"version": "5.10.249", "lessThanOrEqual": "5.10.*", "status": "unaffected", "versionType": "semver"}, {"version": "5.15.199", "lessThanOrEqual": "5.15.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.1.162", "lessThanOrEqual": "6.1.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.6.122", "lessThanOrEqual": "6.6.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.12.67", "lessThanOrEqual": "6.12.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.18.7", "lessThanOrEqual": "6.18.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.19", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.10.246", "versionEndExcluding": "5.10.249"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.15.195", "versionEndExcluding": "5.15.199"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.1.157", "versionEndExcluding": "6.1.162"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.6.113", "versionEndExcluding": "6.6.122"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.12.54", "versionEndExcluding": "6.12.67"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.18", "versionEndExcluding": "6.18.7"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.18", "versionEndExcluding": "6.19"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.4.301"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.17.4"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/7c9f059c3d531a12d7ad96cd34a44b8af7c00d5f"}, {"url": "https://git.kernel.org/stable/c/6241cd1d0acc2363016ac55b8773ba1332dd59d7"}, {"url": "https://git.kernel.org/stable/c/3b00c16e42428a1ecd3a5eb9cc37f8ad9bd47626"}, {"url": "https://git.kernel.org/stable/c/0b06cde92f2f960f4ebe3c988c69f2711f2a24dc"}, {"url": "https://git.kernel.org/stable/c/8e8542c539927ae3898a4d02941f84e252e2dea1"}, {"url": "https://git.kernel.org/stable/c/06e26287f2e349a28ad363941ffd9076bfed8b2e"}, {"url": "https://git.kernel.org/stable/c/d250bdf531d9cd4096fedbb9f172bb2ca660c868"}], "title": "ext4: fix iloc.bh leak in ext4_xattr_inode_update_ref", "x_generator": {"engine": "bippy-1.2.0"}}}}

{}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "ABCD8233-CFD6-4194-AA34-BD9E287307E3", "versionEndExcluding": "5.5", "versionStartIncluding": "5.4.301", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "F97128D0-8B7B-4C48-BEB6-2CB58EDB5BC8", "versionEndExcluding": "5.10.249", "versionStartIncluding": "5.10.246", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "1D7F17D7-D52A-4802-ABE5-E37E21A8DE31", "versionEndExcluding": "5.15.199", "versionStartIncluding": "5.15.195", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "4ADA2900-A980-4762-9956-4806C46E94F7", "versionEndExcluding": "6.1.162", "versionStartIncluding": "6.1.157", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "C3EB3129-3B5E-481C-A81B-8F2E50F2F0E7", "versionEndExcluding": "6.6.122", "versionStartIncluding": "6.6.113", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "E5231312-DF3F-466D-811A-2CE69C074C8B", "versionEndExcluding": "6.12.67", "versionStartIncluding": "6.12.54", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "4E33CB5E-CC4D-432C-954F-DA3EBF2C541D", "versionEndExcluding": "6.18.7", "versionStartIncluding": "6.17.4", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*", "matchCriteriaId": "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*", "matchCriteriaId": "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*", "matchCriteriaId": "F71D92C0-C023-48BD-B3B6-70B638EEE298", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*", "matchCriteriaId": "13580667-0A98-40CC-B29F-D12790B91BDB", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*", "matchCriteriaId": "CAD1FED7-CF48-47BF-AC7D-7B6FA3C065FC", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\next4: fix iloc.bh leak in ext4_xattr_inode_update_ref\n\nThe error branch for ext4_xattr_inode_update_ref forget to release the\nrefcount for iloc.bh. Find this when review code."}, {"lang": "es", "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad:\n\next4: corregir la fuga de iloc.bh en ext4_xattr_inode_update_ref\n\nLa rama de error para ext4_xattr_inode_update_ref olvid\u00f3 liberar el refcount para iloc.bh. Esto se encontr\u00f3 al revisar el c\u00f3digo."}], "id": "CVE-2026-23145", "lastModified": "2026-03-17T21:13:17.667", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2026-02-14T16:15:54.597", "references": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/06e26287f2e349a28ad363941ffd9076bfed8b2e"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/0b06cde92f2f960f4ebe3c988c69f2711f2a24dc"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/3b00c16e42428a1ecd3a5eb9cc37f8ad9bd47626"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/6241cd1d0acc2363016ac55b8773ba1332dd59d7"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/7c9f059c3d531a12d7ad96cd34a44b8af7c00d5f"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/8e8542c539927ae3898a4d02941f84e252e2dea1"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/d250bdf531d9cd4096fedbb9f172bb2ca660c868"}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-401"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{"bugzilla": {"description": "kernel: ext4: fix iloc.bh leak in ext4_xattr_inode_update_ref", "id": "2439842", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2439842"}, "csaw": false, "cvss3": {"cvss3_base_score": "5.5", "cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "status": "draft"}, "details": ["No description is available for this CVE."], "name": "CVE-2026-23145", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:10", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 10"}, {"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Out of support scope", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 9"}], "public_date": "2026-02-14T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-23145\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-23145\nhttps://lore.kernel.org/linux-cve-announce/2026021417-CVE-2026-23145-0c0b@gregkh/T"], "threat_severity": "Low"}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[1cfb3e4ddbdc8e02e637b8852540bd4718bf4814,7c9f059c3d531a12d7ad96cd34a44b8af7c00d5f)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[505e69f76ac497e788f4ea0267826ec7266b40c8,6241cd1d0acc2363016ac55b8773ba1332dd59d7)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[3d6269028246f4484bfed403c947a114bb583631,3b00c16e42428a1ecd3a5eb9cc37f8ad9bd47626)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[79ea7f3e11effe1bd9e753172981d9029133a278,0b06cde92f2f960f4ebe3c988c69f2711f2a24dc)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[6b879c4c6bbaab03c0ad2a983953bd1410bb165e,8e8542c539927ae3898a4d02941f84e252e2dea1)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[57295e835408d8d425bef58da5253465db3d6888,06e26287f2e349a28ad363941ffd9076bfed8b2e)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[57295e835408d8d425bef58da5253465db3d6888,d250bdf531d9cd4096fedbb9f172bb2ca660c868)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "ea39e712c2f5ae148ee5515798ae03523673e002"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "440b003f449a4ff2a00b08c8eab9ba5cd28f3943"}}], "product": "linux_kernel", "vendor": "linux"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "6.18"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[0,6.18)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[5.10.249,5.11.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[5.15.199,5.16.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.1.162,6.2.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.6.122,6.7.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.12.67,6.13.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.18.7,6.19.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.19,*]"}}], "product": "linux_kernel", "vendor": "linux"}], "analysis": {"en": {"generated_at": "2026-04-18T12:21:31.328834+00:00", "value": {"mitigation_remediation": ["Upgrade the kernel to a release that contains the fix, such as Linux kernel 6.19 rc6 or later, or the latest stable 6.19.x.", "If upgrading is not immediately possible, avoid performing extended attribute operations on files in affected filesystems until the kernel is patched.", "As a supplementary measure, monitor system memory usage and kernel logs for signs of iloc.bh leaks; consider applying mitigations such as system reboot or temporary disabling of ext4 extended attributes if the leak causes instability."], "summary": {"action": "Patch Kernel", "impact": "Resource Exhaustion"}, "threat_synthesis": {"affected_systems": "Affected systems are Linux kernels that contain the vulnerable code prior to the fix. The CPE data indicates that the 6.19 release candidates (rc1 through rc5) are impacted, and any kernel variants derived from the generic Linux:Linux product that include those release candidates are also vulnerable. Systems still running these kernels without the applied patch are at risk.", "description_and_impact": "This vulnerability originates from a missing reference count decrement in the ext4_xattr_inode_update_ref routine, which can cause reference count leaks for the inode locality buffer (iloc.bh). The leak can accumulate unaddressed resources, potentially leading to memory exhaustion or degraded filesystem performance. The weakness is a classic memory management defect (CWE-401).", "risk_and_exploitability": "The CVSS score is 5.5, indicating moderate risk, while the EPSS score is below 1%, implying a very low likelihood of exploitation in the wild. The vulnerability is not listed in the CISA KEV catalog. The impact requires execution of ext4 extended attribute operations, which generally requires root or privileged access. Therefore the likely attack vector is local privileged use, and while a remote vector is not indicated, an attacker with sufficient access could trigger the leak repeatedly, leading to resource exhaustion over time."}}}}, "created": "2026-02-16T12:01:21.879744+00:00", "updated": "2026-04-18T12:30:45.454562+00:00", "vendors": ["linux", "linux$PRODUCT$linux_kernel"]}