CVE-2025-71268

btrfs: fix reservation leak in some error paths when inserting inline extent

State: Published
Severity: 7.5 High
Published: Mar 18, 2026
Updated: Oct 19, 2026
Reserved: Mar 17, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

btrfs: fix reservation leak in some error paths when inserting inline extent

If we fail to allocate a path or join a transaction, we return from __cow_file_range_inline() without freeing the reserved qgroup data, resulting in a leak. Fix this by ensuring we call btrfs_qgroup_free_data() in such cases.

Scores

CVSS	Score	Vector	Source
3.1	7.5 High	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H	Linux

Weaknesses

CWE-772 Missing Release of Resource after Effective Lifetime

Affected Products

Product	Versions
LinuxLinux	94ed938aba557aa798acf496f09afb289b619fcd to before f7156512c8166d385f574b9ec030479aa7b1e8c9Affected 94ed938aba557aa798acf496f09afb289b619fcd to before 28b97fcbbf523779688e8de5fe55bf2dae3859f6Affected 94ed938aba557aa798acf496f09afb289b619fcd to before f3ee1732851aec6fe6b2cec2ef1b32d4e71d9913Affected 94ed938aba557aa798acf496f09afb289b619fcd to before 28768bd3abf9995a93f6e01bfce01c60622964ddAffected 94ed938aba557aa798acf496f09afb289b619fcd to before c1c050f92d8f6aac4e17f7f2230160794fceef0cAffected
LinuxLinux	4.4Affected before 4.4Not affected 6.1.163 through 6.1.Not affected 6.6.124 through 6.6.Not affected 6.12.70 through 6.12.Not affected 6.18.10 through 6.18.Not affected 6.19 and laterNot affected

Product

Versions

LinuxLinux

94ed938aba557aa798acf496f09afb289b619fcd to before f7156512c8166d385f574b9ec030479aa7b1e8c9Affected
94ed938aba557aa798acf496f09afb289b619fcd to before 28b97fcbbf523779688e8de5fe55bf2dae3859f6Affected
94ed938aba557aa798acf496f09afb289b619fcd to before f3ee1732851aec6fe6b2cec2ef1b32d4e71d9913Affected
94ed938aba557aa798acf496f09afb289b619fcd to before 28768bd3abf9995a93f6e01bfce01c60622964ddAffected
94ed938aba557aa798acf496f09afb289b619fcd to before c1c050f92d8f6aac4e17f7f2230160794fceef0cAffected

LinuxLinux

4.4Affected
before 4.4Not affected
6.1.163 through 6.1.*Not affected
6.6.124 through 6.6.*Not affected
6.12.70 through 6.12.*Not affected
6.18.10 through 6.18.*Not affected
6.19 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.