{"id":"CVE-2026-46005","title":"xfs: fix a resource leak in xfs_alloc_buftarg()","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\nxfs: fix a resource leak in xfs_alloc_buftarg()\n\nIn the error path, call fs_put_dax() to drop the DAX\ndevice reference.","severity":"none","vendor":"Linux","product":"Linux","affected":["Linux >= 6f643c57d57c56d4677bc05f1fca2ef3f249797c < ed2d6442e61169e565727ba15c4f6a0cb5ce16df","Linux >= 6f643c57d57c56d4677bc05f1fca2ef3f249797c < 82fb9da6477d08bdab954dc7bc081a41f2f9cae6","Linux >= 6f643c57d57c56d4677bc05f1fca2ef3f249797c < 28a6c132b8c6e5eeefa889c4fb43d65b12989d48","Linux >= 6f643c57d57c56d4677bc05f1fca2ef3f249797c < 5c293a1e1ef0f838772d20ae8afae4cbd87cd3f9","Linux >= 6f643c57d57c56d4677bc05f1fca2ef3f249797c < 5804cb507233ed767a83ac70527b2f6c4566ec75","Linux >= 6f643c57d57c56d4677bc05f1fca2ef3f249797c < 29a7b2614357393b176ef06ba5bc3ff5afc8df69","Linux 6.0"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-11-06T16:04:54.970480Z"},"published":"2026-05-27","updated":"2026-11-06","sourceUpdated":"2026-11-06T16:13:31.579Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-46005","references":[{"url":"https://git.kernel.org/stable/c/ed2d6442e61169e565727ba15c4f6a0cb5ce16df"},{"url":"https://git.kernel.org/stable/c/82fb9da6477d08bdab954dc7bc081a41f2f9cae6"},{"url":"https://git.kernel.org/stable/c/28a6c132b8c6e5eeefa889c4fb43d65b12989d48"},{"url":"https://git.kernel.org/stable/c/5c293a1e1ef0f838772d20ae8afae4cbd87cd3f9"},{"url":"https://git.kernel.org/stable/c/5804cb507233ed767a83ac70527b2f6c4566ec75"},{"url":"https://git.kernel.org/stable/c/29a7b2614357393b176ef06ba5bc3ff5afc8df69"}],"tags":["cve.org"],"epss":0.00128,"epssPercentile":0.02471,"ingestedAt":"2026-11-06T16:57:43.351Z","slug":"CVE-2026-46005","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nxfs: fix a resource leak in xfs_alloc_buftarg()\n\nIn the error path, call fs_put_dax() to drop the DAX\ndevice reference.\n\n## Affected\n\n- `Linux >= 6f643c57d57c56d4677bc05f1fca2ef3f249797c < ed2d6442e61169e565727ba15c4f6a0cb5ce16df`\n- `Linux >= 6f643c57d57c56d4677bc05f1fca2ef3f249797c < 82fb9da6477d08bdab954dc7bc081a41f2f9cae6`\n- `Linux >= 6f643c57d57c56d4677bc05f1fca2ef3f249797c < 28a6c132b8c6e5eeefa889c4fb43d65b12989d48`\n- `Linux >= 6f643c57d57c56d4677bc05f1fca2ef3f249797c < 5c293a1e1ef0f838772d20ae8afae4cbd87cd3f9`\n- `Linux >= 6f643c57d57c56d4677bc05f1fca2ef3f249797c < 5804cb507233ed767a83ac70527b2f6c4566ec75`\n- `Linux >= 6f643c57d57c56d4677bc05f1fca2ef3f249797c < 29a7b2614357393b176ef06ba5bc3ff5afc8df69`\n- `Linux 6.0`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}