Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2026-92494 Details

Description

In the Linux kernel, the following vulnerability has been resolved: ext4: fix buffer_head leak in ext4_init_orphan_info ext4_init_orphan_info() reads orphan file blocks with ext4_bread() and stores the returned buffer_head in oi->of_binfo[i].ob_bh. If ext4_bread() succeeds but the orphan block magic or checksum validation fails, the function jumps to out_free. However, the old out_free loop starts releasing buffers from i - 1, so the current buffer_head at index i is skipped. This leaks the buffer_head reference obtained by ext4_bread() on the bad magic and bad checksum error paths. Fix this by tracking the number of successfully read buffer_heads and releasing exactly those buffer_heads on the error path.

Metrics

CVSS 3.x Severity and Vector Strings:

No CVSS 3.x data is available for this CVE.

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
https://git.kernel.org/stable/c/05704335803b69c1bfa8637b7ada942bf2ee8a41	kernel.org
https://git.kernel.org/stable/c/1399f102d8a1855c1a38506057306ec79d0787d9	kernel.org
https://git.kernel.org/stable/c/35fc83c65faf7949f5701bb34b20f822560a7718	kernel.org
https://git.kernel.org/stable/c/6ec53ccab0d691b3c73e03d930343ca45987e88d	kernel.org
https://git.kernel.org/stable/c/74637f7fef030e5fb2e835b7dfeb05efdc48e0fe	kernel.org
https://git.kernel.org/stable/c/a9a6ec1298f9bc134b2c5db27d25bb10603b7113	kernel.org
https://git.kernel.org/stable/c/e1e342d9a561c016b8531ec1f4dcefaad9d64954	kernel.org

see all 7 references

Weakness Enumeration

No weakness enumeration is available for this CVE.

Affected Products

No affected product data is available for this CVE.

Change History

1 change record found show changes