CVE-2026-98448

Source
https://cve.org/CVERecord?id=CVE-2026-98448
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-98448.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-98448
Downstream
Published
2026-10-18T15:14:58Z
Modified
2026-10-19T02:46:19Z
Summary
xfs: release orphanage dir inode if chown fails
Details

In the Linux kernel, the following vulnerability has been resolved:

xfs: release orphanage dir inode if chown fails

LOLLM points out that we leak the igrab'd reference to the orphanage directory inode if chowning it fails. Fix that.

Database specific
{
    "cna_assigner":  "Linux",
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/98xxx/CVE-2026-98448.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
1e58a8ccf2597c9259a8e71a2bffac5e11e12ea0
Fixed
6b66b1a59df6c3f9b4ad9b39a32ca86170ade357
Fixed
6a65a68097a1903988b256d5b367da7b0863a1d5
Fixed
f813aefd9e09c8cda38a71580b6a01552d97cade
Fixed
1c32cdc986467eaffeedb6c5334852809555b82d

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-98448.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
6.10.0
Fixed
6.12.112
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.18.55
Type
ECOSYSTEM
Events
Introduced
6.19.0
Fixed
7.2.9

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-98448.json"