AUGUST 18, 2026
Live Feed
Back to database
Case File

CVE-2026-68450

UNKNOWN · CVSS N/A EPSS 0.16%

Source: NVD + CISA KEV + EPSS · Published 2026-08-12 · Last synced 2026-08-17

CyberRota Analysis

AI-Generated

The vulnerability affects the Linux kernel's Btrfs file system, specifically in the handling of duplicate relocation root inserts. If a duplicate entry is detected during the insertion process, the newly allocated mapping node is not freed, potentially leading to memory leaks. System administrators and developers working with Linux kernel versions that utilize Btrfs should prioritize applying the fix to prevent resource exhaustion and ensure system stability.

CVE
CVE-2026-68450
Severity
UNKNOWN
CVSS
N/A
EPSS
0.16%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: btrfs: free mapping node on duplicate reloc root insert __add_reloc_root() allocates a mapping_node before inserting it into rc->reloc_root_tree. If rb_simple_insert() finds an existing entry, it returns the existing rb_node and leaves the newly allocated node unlinked. The error path then returns -EEXIST without freeing the new node. Since the node was never inserted into reloc_root_tree, the later cleanup in put_reloc_control() cannot find it either. Free the newly allocated node before returning -EEXIST. The callers currently assert that -EEXIST should not happen, so this is a defensive cleanup for an unexpected duplicate insert path. If the path is ever reached, the local allocation should still be released.