{"id":"CVE-2026-45948","title":"ext4: fix memory leak in ext4_ext_shift_extents()","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\next4: fix memory leak in ext4_ext_shift_extents()\n\nIn ext4_ext_shift_extents(), if the extent is NULL in the while loop, the\nfunction returns immediately without releas…","severity":"none","vendor":"Linux","product":"Linux","affected":["Linux >= a18ed359bdddcded4f97ff5e2f07793ff9336913 < 7e807cb8603b7664fa630a696cd891d9a03c248d","Linux >= a18ed359bdddcded4f97ff5e2f07793ff9336913 < afc5e61e1a07b2b833bd72cbee36ecce9cd901e2","Linux >= a18ed359bdddcded4f97ff5e2f07793ff9336913 < 1bce219ee5512cf179ba40cf114945a14a16e21f","Linux >= a18ed359bdddcded4f97ff5e2f07793ff9336913 < 4a79fde8db7eba7f1128d971ceba4e3c9ac84aec","Linux >= a18ed359bdddcded4f97ff5e2f07793ff9336913 < 2f4b1052246ca646bb17bfe0f53df2fdf9729b58","Linux >= a18ed359bdddcded4f97ff5e2f07793ff9336913 < 12615ab4bfb69678e5d961b28bb70040299e51b1","Linux >= a18ed359bdddcded4f97ff5e2f07793ff9336913 < bd7b52557e4a3ccd7595fdb3a585f1257de57935","Linux >= a18ed359bdddcded4f97ff5e2f07793ff9336913 < ca81109d4a8f192dc1cbad4a1ee25246363c2833","Linux 3.15"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-11-06T16:02:42.810876Z"},"published":"2026-05-27","updated":"2026-11-06","sourceUpdated":"2026-11-06T16:03:16.054Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-45948","references":[{"url":"https://git.kernel.org/stable/c/7e807cb8603b7664fa630a696cd891d9a03c248d"},{"url":"https://git.kernel.org/stable/c/afc5e61e1a07b2b833bd72cbee36ecce9cd901e2"},{"url":"https://git.kernel.org/stable/c/1bce219ee5512cf179ba40cf114945a14a16e21f"},{"url":"https://git.kernel.org/stable/c/4a79fde8db7eba7f1128d971ceba4e3c9ac84aec"},{"url":"https://git.kernel.org/stable/c/2f4b1052246ca646bb17bfe0f53df2fdf9729b58"},{"url":"https://git.kernel.org/stable/c/12615ab4bfb69678e5d961b28bb70040299e51b1"},{"url":"https://git.kernel.org/stable/c/bd7b52557e4a3ccd7595fdb3a585f1257de57935"},{"url":"https://git.kernel.org/stable/c/ca81109d4a8f192dc1cbad4a1ee25246363c2833"}],"tags":["cve.org"],"epss":0.0016,"epssPercentile":0.05198,"ingestedAt":"2026-11-06T16:57:43.374Z","slug":"CVE-2026-45948","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\next4: fix memory leak in ext4_ext_shift_extents()\n\nIn ext4_ext_shift_extents(), if the extent is NULL in the while loop, the\nfunction returns immediately without releasing the path obtained via\next4_find_extent(), leading to a memory leak.\n\nFix this by jumping to the out label to ensure the path is properly\nreleased.\n\n## Affected\n\n- `Linux >= a18ed359bdddcded4f97ff5e2f07793ff9336913 < 7e807cb8603b7664fa630a696cd891d9a03c248d`\n- `Linux >= a18ed359bdddcded4f97ff5e2f07793ff9336913 < afc5e61e1a07b2b833bd72cbee36ecce9cd901e2`\n- `Linux >= a18ed359bdddcded4f97ff5e2f07793ff9336913 < 1bce219ee5512cf179ba40cf114945a14a16e21f`\n- `Linux >= a18ed359bdddcded4f97ff5e2f07793ff9336913 < 4a79fde8db7eba7f1128d971ceba4e3c9ac84aec`\n- `Linux >= a18ed359bdddcded4f97ff5e2f07793ff9336913 < 2f4b1052246ca646bb17bfe0f53df2fdf9729b58`\n- `Linux >= a18ed359bdddcded4f97ff5e2f07793ff9336913 < 12615ab4bfb69678e5d961b28bb70040299e51b1`\n- `Linux >= a18ed359bdddcded4f97ff5e2f07793ff9336913 < bd7b52557e4a3ccd7595fdb3a585f1257de57935`\n- `Linux >= a18ed359bdddcded4f97ff5e2f07793ff9336913 < ca81109d4a8f192dc1cbad4a1ee25246363c2833`\n- `Linux 3.15`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}