CyberRota Analysis
AI-GeneratedThe vulnerability affects the Linux kernel's EROFS (Enhanced Read-Only File System) implementation, specifically in the handling of extended attributes (xattrs) during inode initialization. A failure to properly release memory buffers in certain error paths can lead to a memory leak, potentially impacting system performance and stability. System administrators and developers using affected Linux distributions should prioritize addressing this issue to ensure efficient memory management and system reliability.
Original NVD Description
In the Linux kernel, the following vulnerability has been resolved: erofs: fix metabuf leak in inode xattr initialization commit bb88e8da0025 ("erofs: use meta buffers for xattr operations") converted xattr operations to use on-stack erofs_buf instances. erofs_init_inode_xattrs() uses such a metabuf while reading the inline xattr header and shared xattr id array. Some error paths after erofs_read_metabuf() leave through out_unlock without dropping the metabuf, so the folio reference can leak. Consolidate the cleanup at out_unlock. erofs_put_metabuf() is a no-op if no folio has been acquired, and this keeps all paths after taking EROFS_I_BL_XATTR_BIT covered by a single cleanup site.
Related CVEs
Other vulnerabilities affecting the same vendor(s)