news.mlab.sh
Vulnerabilities
Vulnerability

CVE-2026-23145

Reference data from vuln.mlab.sh, coverage from our own index.

CVSS
3.3 Low
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
EPSS
0.12%
Risk score
0.7
Published
2026-02-14
Status
Published

In the Linux kernel, the following vulnerability has been resolved: ext4: fix iloc.bh leak in ext4_xattr_inode_update_ref The error branch for ext4_xattr_inode_update_ref forget to release the refcount for iloc.bh. Find this when review code. A memory leak flaw was found in the Linux kernel's ext4 filesystem. In the ext4_xattr_inode_update_ref() function, the error handling path fails to release the buffer head reference (iloc.bh). This causes a buffer head leak on each error occurrence, which over time can lead to memory exhaustion and system instability.

Weaknesses

CWE-401

Coverage 3

Advisories and references