CVE-2026-23145

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-23145
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-23145.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-23145
Downstream
BELL (1)
DEBIAN (1)
MGASA (2)
OESA (3)
openSUSE (1)
ROOT (2)
SUSE (10)
UBUNTU (1)
Related
openSUSE (1)
SUSE (10)
Published
2026-02-14T15:36:10Z
Modified
2026-10-20T10:30:30Z
Summary
ext4: fix iloc.bh leak in ext4_xattr_inode_update_ref
Details

In the Linux kernel, the following vulnerability has been resolved:

ext4: fix iloc.bh leak in ext4_xattr_inode_update_ref

The error branch for ext4_xattr_inode_update_ref forget to release the refcount for iloc.bh. Find this when review code.

Database specific 
{
    "cna_assigner":  "Linux",
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/23xxx/CVE-2026-23145.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
1cfb3e4ddbdc8e02e637b8852540bd4718bf4814
Fixed
7c9f059c3d531a12d7ad96cd34a44b8af7c00d5f
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
505e69f76ac497e788f4ea0267826ec7266b40c8
Fixed
6241cd1d0acc2363016ac55b8773ba1332dd59d7
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
3d6269028246f4484bfed403c947a114bb583631
Fixed
3b00c16e42428a1ecd3a5eb9cc37f8ad9bd47626
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
79ea7f3e11effe1bd9e753172981d9029133a278
Fixed
0b06cde92f2f960f4ebe3c988c69f2711f2a24dc
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
6b879c4c6bbaab03c0ad2a983953bd1410bb165e
Fixed
8e8542c539927ae3898a4d02941f84e252e2dea1
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
57295e835408d8d425bef58da5253465db3d6888
Fixed
06e26287f2e349a28ad363941ffd9076bfed8b2e
Fixed
d250bdf531d9cd4096fedbb9f172bb2ca660c868
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
5.10.246
Fixed
5.10.249
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
5.15.195
Fixed
5.15.199
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
6.1.157
Fixed
6.1.162
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
6.6.113
Fixed
6.6.122
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
6.12.54
Fixed
6.12.67
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
5.4.301
Fixed
5.5
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
6.17.4
Fixed
6.18
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
ea39e712c2f5ae148ee5515798ae03523673e002
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
440b003f449a4ff2a00b08c8eab9ba5cd28f3943

Affected versions

v5.*
v5.10.246
v5.10.247
v5.10.248
v5.15.195
v5.15.196
v5.15.197
v5.15.198
v5.4.301
v5.4.302
v6.*
v6.1.157
v6.1.158
v6.1.159
v6.1.160
v6.1.161
v6.12.54
v6.12.55
v6.12.56
v6.12.57
v6.12.58
v6.12.59
v6.12.60
v6.12.61
v6.12.62
v6.12.63
v6.12.64
v6.12.65
v6.12.66
v6.17.10
v6.17.11
v6.17.12
v6.17.13
v6.17.4
v6.17.5
v6.17.6
v6.17.7
v6.17.8
v6.17.9
v6.6.113
v6.6.114
v6.6.115
v6.6.116
v6.6.117
v6.6.118
v6.6.119
v6.6.120
v6.6.121

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-23145.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
5.10.249
Type
ECOSYSTEM
Events
Introduced
5.11.0
Fixed
5.15.199
Type
ECOSYSTEM
Events
Introduced
5.16.0
Fixed
6.1.162
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.6.122
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.12.67
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.18.7

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-23145.json"