In the Linux kernel, the following vulnerability has been resolved:

btrfs: fix root leak if its reloc root is unexpected in merge_reloc_roots()

If we have an unexpected reloc_root for our root, we jump to the out label
but never drop the reference we obtained for root, resulting in a leak.
Add a missing btrfs_put_root() call.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

No EPSS score available.

Key SSVC decision points have not yet been added.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Linux Linux unaffected
Version Status Constraints
24213fa46c7080c31d79aa2e3e2f0d9480cab700 affected < b3d39b03799600c76c33486e2d29b73a771023db
24213fa46c7080c31d79aa2e3e2f0d9480cab700 affected < 72f673d1c1deb819554d3e7e154f6d84301eb735
24213fa46c7080c31d79aa2e3e2f0d9480cab700 affected < 60a23d4ea169e27403f3bb023bb98036797c0206
24213fa46c7080c31d79aa2e3e2f0d9480cab700 affected < 7591d1727067d6063247901ad25c4bdc4e5695c4
24213fa46c7080c31d79aa2e3e2f0d9480cab700 affected < ce6050bafb4e33377dc17fcc357736bfc351180c
Linux Linux affected
Version Status Constraints
5.13 affected —
0 unaffected < 5.13
6.6.148 unaffected ≤ 6.6.*
6.12.101 unaffected ≤ 6.12.*
6.18.42 unaffected ≤ 6.18.*
7.1.6 unaffected ≤ 7.1.*
7.2-rc4 unaffected ≤ *

No data.

No data.

No data.

Project Subscriptions

Vendors Products
Linux Subscribe
Linux Kernel Subscribe
Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://git.kernel.org/stable/c/60a23d4ea169e27403f3bb023bb98036797c0206 cve-icon
https://git.kernel.org/stable/c/72f673d1c1deb819554d3e7e154f6d84301eb735 cve-icon
https://git.kernel.org/stable/c/7591d1727067d6063247901ad25c4bdc4e5695c4 cve-icon
https://git.kernel.org/stable/c/b3d39b03799600c76c33486e2d29b73a771023db cve-icon
https://git.kernel.org/stable/c/ce6050bafb4e33377dc17fcc357736bfc351180c cve-icon
History

Mon, 10 Aug 2026 12:30:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: btrfs: fix root leak if its reloc root is unexpected in merge_reloc_roots() If we have an unexpected reloc_root for our root, we jump to the out label but never drop the reference we obtained for root, resulting in a leak. Add a missing btrfs_put_root() call.
Title btrfs: fix root leak if its reloc root is unexpected in merge_reloc_roots()
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-08-10T12:04:42.949Z

Reserved: 2026-07-30T09:28:09.392Z

Link: CVE-2026-68422

cve-icon Vulnrichment

No data.

cve-icon NVD

No data.

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses

No weakness.