CVE-2026-99067

not scored yet · published 2026-10-23

In the Linux kernel, the following vulnerability has been resolved: btrfs: scrub: fix local_root reference leak in scrub_print_warning_inode() When paths_from_inode() fails, scrub_print_warning_inode() jumps to err without dropping the reference taken by btrfs_get_fs_root(), leaking a reference to the root every time path resolution fails while printing scrub warnings. Every other error and success path of the function drops the reference. Drop the reference on the paths_from_inode() failure path too.

Source: NVD CVE-2026-99067

References

• https://git.kernel.org/stable/c/12ba7d8b9cd45a2c6aa8f37c3f4b8a50422fb549
• https://git.kernel.org/stable/c/1fd742c7479961da6d0bb794ef8ac6b7b9442847
• https://git.kernel.org/stable/c/41cabfbf3532e2a2a17be9e4876042a5393b5c8d
• https://git.kernel.org/stable/c/452a435b74f7f598a343c51f7c89c5d2244384b6
• https://git.kernel.org/stable/c/a7e5992bc37088f9b00e531955022aef69de3dc7
• https://git.kernel.org/stable/c/caebda739a724f0db57753351c01eaf2bf610576
• https://git.kernel.org/stable/c/e8d5cdd2b2e88177334326b002a58a5fae6e380c
• https://git.kernel.org/stable/c/fc6d6b17584de7fb616b011e01f008ec3328063f

Check your software

Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.