Riskcovery

CVE-2026-68450

btrfs: free mapping node on duplicate reloc root insert

State
Published
Severity
Not scored
Published
Aug 12, 2026
Updated
Aug 19, 2026
Reserved
Jul 30, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

btrfs: free mapping node on duplicate reloc root insert

__add_reloc_root() allocates a mapping_node before inserting it into rc->reloc_root_tree. If rb_simple_insert() finds an existing entry, it returns the existing rb_node and leaves the newly allocated node unlinked.

The error path then returns -EEXIST without freeing the new node. Since the node was never inserted into reloc_root_tree, the later cleanup in put_reloc_control() cannot find it either.

Free the newly allocated node before returning -EEXIST.

The callers currently assert that -EEXIST should not happen, so this is a defensive cleanup for an unexpected duplicate insert path. If the path is ever reached, the local allocation should still be released.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 57a304cfd43b2b4a5b44b8f5dc026abb34183068 to before 29d9746812d8b7c37d594f484e994fd552c3ec33Affected
  • 57a304cfd43b2b4a5b44b8f5dc026abb34183068 to before b7c5b8e1d5f0779dfbabc3068b7ac0f12e53b3a8Affected
  • 57a304cfd43b2b4a5b44b8f5dc026abb34183068 to before 92bedc0455552b42ada1a1f42b0e3a8593cdfcccAffected
  • 57a304cfd43b2b4a5b44b8f5dc026abb34183068 to before 14a8be9428435ee17f17fae7991215c246b7fd43Affected
  • 57a304cfd43b2b4a5b44b8f5dc026abb34183068 to before 797dc567146c7e3c4f8d9680e4fbc76e0a6d9151Affected
  • 57a304cfd43b2b4a5b44b8f5dc026abb34183068 to before ae0629ff9ccb836416ada129f4edc7efea6eaaadAffected
  • 57a304cfd43b2b4a5b44b8f5dc026abb34183068 to before 6a8269b6459ed870a8156c106a0f597383907872Affected
LinuxLinux
  • 5.13Affected
  • before 5.13Not affected
  • 5.15.216 through 5.15.*Not affected
  • 6.1.183 through 6.1.*Not affected
  • 6.6.148 through 6.6.*Not affected
  • 6.12.101 through 6.12.*Not affected
  • 6.18.42 through 6.18.*Not affected
  • 7.1.6 through 7.1.*Not affected
  • 7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.