Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2026-64356

In the Linux kernel, the following vulnerability has been resolved: xfs: fix memory leak in xfs_dqinode_metadir_create() If xfs_metadir_create() fails in xfs_dqinode_metadir_create(), the current code returns directly, leaking the allocated update and transaction state. If the subsequent commit fails, the caller-owned inode reference is left behind. Fix this memory leak by routing the create failure path through xfs_metadir_cancel(). For both create and commit failures, finish and release an
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:2ffed22e835530261dacd07b42e547124a12c8ff4bf112d7b7cfc0678742989f
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"affected","product":"Linux","programFiles":["fs/xfs/libxfs/xfs_dquot_buf.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"6.13"},{"lessThan":"6.13","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"6.18.*","status":"unaffected","version":"6.18.39","versionType":"semver"},{"lessThanOrEqual":"7.1.*","status":"unaffected","version":"7.1.4","versionType":"semver"},{"lessThanOrEqual":"*","status":"unaffected","version":"7.2-rc2","versionType":"original_commit_for…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:1f0a332f062f920cefa9e767d1778a7a0d1fa4472041ba0e89efc2544cca7d10 · sha256:2b6ed13935fd969c… · /containers/cna/affected/1

{"defaultStatus":"unaffected","product":"Linux","programFiles":["fs/xfs/libxfs/xfs_dquot_buf.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"c3d3d2212c2966973dd7d603c6c6e6ed6fc7fbe1","status":"affected","version":"e80fbe1ad8eff7d7d1363e14f1e493d84dd37c84","versionType":"git"},{"lessThan":"06a2e6dbaa26c0740ac76dfa66b0aedc78d05820","status":"affected","version":"e80fbe1ad8eff7d7d1363e14f1e493d84dd37c84","versionType":"git"},{"lessThan":"45de375b25060edf46e20abb36521ba530336ceb","status":"affected","version":"e80fbe1ad8eff7d7…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:1f0a332f062f920cefa9e767d1778a7a0d1fa4472041ba0e89efc2544cca7d10 · sha256:2b6ed13935fd969c… · /containers/cna/affected/0

Affected products and versions

2 source assertions
{"defaultStatus":"affected","product":"Linux","programFiles":["fs/xfs/libxfs/xfs_dquot_buf.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"6.13"},{"lessThan":"6.13","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"6.18.*","status":"unaffected","version":"6.18.39","versionType":"semver"},{"lessThanOrEqual":"7.1.*","status":"unaffected","version":"7.1.4","versionType":"semver"},{"lessThanOrEqual":"*","status":"unaffected","version":"7.2-rc2","versionType":"original_commit_for…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:1f0a332f062f920cefa9e767d1778a7a0d1fa4472041ba0e89efc2544cca7d10 · sha256:2b6ed13935fd969c… · /containers/cna/affected/1
{"defaultStatus":"unaffected","product":"Linux","programFiles":["fs/xfs/libxfs/xfs_dquot_buf.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"c3d3d2212c2966973dd7d603c6c6e6ed6fc7fbe1","status":"affected","version":"e80fbe1ad8eff7d7d1363e14f1e493d84dd37c84","versionType":"git"},{"lessThan":"06a2e6dbaa26c0740ac76dfa66b0aedc78d05820","status":"affected","version":"e80fbe1ad8eff7d7d1363e14f1e493d84dd37c84","versionType":"git"},{"lessThan":"45de375b25060edf46e20abb36521ba530336ceb","status":"affected","version":"e80fbe1ad8eff7d7…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:1f0a332f062f920cefa9e767d1778a7a0d1fa4472041ba0e89efc2544cca7d10 · sha256:2b6ed13935fd969c… · /containers/cna/affected/0

Source references

3 source assertions
{"url":"https://git.kernel.org/stable/c/06a2e6dbaa26c0740ac76dfa66b0aedc78d05820"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:1f0a332f062f920cefa9e767d1778a7a0d1fa4472041ba0e89efc2544cca7d10 · sha256:2b6ed13935fd969c… · /containers/cna/references/1
{"url":"https://git.kernel.org/stable/c/45de375b25060edf46e20abb36521ba530336ceb"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:1f0a332f062f920cefa9e767d1778a7a0d1fa4472041ba0e89efc2544cca7d10 · sha256:2b6ed13935fd969c… · /containers/cna/references/2
{"url":"https://git.kernel.org/stable/c/c3d3d2212c2966973dd7d603c6c6e6ed6fc7fbe1"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:1f0a332f062f920cefa9e767d1778a7a0d1fa4472041ba0e89efc2544cca7d10 · sha256:2b6ed13935fd969c… · /containers/cna/references/0

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer