CVE-2026-68422

btrfs: fix root leak if its reloc root is unexpected in merge_reloc_roots()

State: Published
Severity: Not scored
Published: Aug 10, 2026
Updated: Aug 19, 2026
Reserved: Jul 30, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

btrfs: fix root leak if its reloc root is unexpected in merge_reloc_roots()

If we have an unexpected reloc_root for our root, we jump to the out label but never drop the reference we obtained for root, resulting in a leak. Add a missing btrfs_put_root() call.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	24213fa46c7080c31d79aa2e3e2f0d9480cab700 to before f89df93e8aefa4c1c813f835559f2ac727f79766Affected 24213fa46c7080c31d79aa2e3e2f0d9480cab700 to before 3f586b4c92e4272fcd01bf0db0590b63acf3e85bAffected 24213fa46c7080c31d79aa2e3e2f0d9480cab700 to before b3d39b03799600c76c33486e2d29b73a771023dbAffected 24213fa46c7080c31d79aa2e3e2f0d9480cab700 to before 72f673d1c1deb819554d3e7e154f6d84301eb735Affected 24213fa46c7080c31d79aa2e3e2f0d9480cab700 to before 60a23d4ea169e27403f3bb023bb98036797c0206Affected 24213fa46c7080c31d79aa2e3e2f0d9480cab700 to before 7591d1727067d6063247901ad25c4bdc4e5695c4Affected 24213fa46c7080c31d79aa2e3e2f0d9480cab700 to before ce6050bafb4e33377dc17fcc357736bfc351180cAffected
LinuxLinux	5.13Affected before 5.13Not affected 5.15.216 through 5.15.Not affected 6.1.183 through 6.1.Not affected 6.6.148 through 6.6.Not affected 6.12.101 through 6.12.Not affected 6.18.42 through 6.18.Not affected 7.1.6 through 7.1.Not affected 7.2 and laterNot affected

Product

Versions

LinuxLinux

24213fa46c7080c31d79aa2e3e2f0d9480cab700 to before f89df93e8aefa4c1c813f835559f2ac727f79766Affected
24213fa46c7080c31d79aa2e3e2f0d9480cab700 to before 3f586b4c92e4272fcd01bf0db0590b63acf3e85bAffected
24213fa46c7080c31d79aa2e3e2f0d9480cab700 to before b3d39b03799600c76c33486e2d29b73a771023dbAffected
24213fa46c7080c31d79aa2e3e2f0d9480cab700 to before 72f673d1c1deb819554d3e7e154f6d84301eb735Affected
24213fa46c7080c31d79aa2e3e2f0d9480cab700 to before 60a23d4ea169e27403f3bb023bb98036797c0206Affected
24213fa46c7080c31d79aa2e3e2f0d9480cab700 to before 7591d1727067d6063247901ad25c4bdc4e5695c4Affected
24213fa46c7080c31d79aa2e3e2f0d9480cab700 to before ce6050bafb4e33377dc17fcc357736bfc351180cAffected

LinuxLinux

5.13Affected
before 5.13Not affected
5.15.216 through 5.15.*Not affected
6.1.183 through 6.1.*Not affected
6.6.148 through 6.6.*Not affected
6.12.101 through 6.12.*Not affected
6.18.42 through 6.18.*Not affected
7.1.6 through 7.1.*Not affected
7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.