{"id":"CVE-2026-68422","title":"btrfs: fix root leak if its reloc root is unexpected in merge_reloc_roots()","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\nbtrfs: fix root leak if its reloc root is unexpected in merge_reloc_roots()\n\nIf we have an unexpected reloc_root for our root, we jump to the out label\nbut never drop t…","severity":"none","vendor":"Linux","product":"Linux","affected":["Linux >= 24213fa46c7080c31d79aa2e3e2f0d9480cab700 < f89df93e8aefa4c1c813f835559f2ac727f79766","Linux >= 24213fa46c7080c31d79aa2e3e2f0d9480cab700 < 3f586b4c92e4272fcd01bf0db0590b63acf3e85b","Linux >= 24213fa46c7080c31d79aa2e3e2f0d9480cab700 < b3d39b03799600c76c33486e2d29b73a771023db","Linux >= 24213fa46c7080c31d79aa2e3e2f0d9480cab700 < 72f673d1c1deb819554d3e7e154f6d84301eb735","Linux >= 24213fa46c7080c31d79aa2e3e2f0d9480cab700 < 60a23d4ea169e27403f3bb023bb98036797c0206","Linux >= 24213fa46c7080c31d79aa2e3e2f0d9480cab700 < 7591d1727067d6063247901ad25c4bdc4e5695c4","Linux >= 24213fa46c7080c31d79aa2e3e2f0d9480cab700 < ce6050bafb4e33377dc17fcc357736bfc351180c","Linux 5.13"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-11-06T16:49:10.686540Z"},"published":"2026-08-10","updated":"2026-11-06","sourceUpdated":"2026-11-06T16:55:16.265Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-68422","references":[{"url":"https://git.kernel.org/stable/c/f89df93e8aefa4c1c813f835559f2ac727f79766"},{"url":"https://git.kernel.org/stable/c/3f586b4c92e4272fcd01bf0db0590b63acf3e85b"},{"url":"https://git.kernel.org/stable/c/b3d39b03799600c76c33486e2d29b73a771023db"},{"url":"https://git.kernel.org/stable/c/72f673d1c1deb819554d3e7e154f6d84301eb735"},{"url":"https://git.kernel.org/stable/c/60a23d4ea169e27403f3bb023bb98036797c0206"},{"url":"https://git.kernel.org/stable/c/7591d1727067d6063247901ad25c4bdc4e5695c4"},{"url":"https://git.kernel.org/stable/c/ce6050bafb4e33377dc17fcc357736bfc351180c"}],"tags":["cve.org"],"epss":0.00215,"epssPercentile":0.11957,"ingestedAt":"2026-11-06T18:00:12.603Z","slug":"CVE-2026-68422","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nbtrfs: fix root leak if its reloc root is unexpected in merge_reloc_roots()\n\nIf we have an unexpected reloc_root for our root, we jump to the out label\nbut never drop the reference we obtained for root, resulting in a leak.\nAdd a missing btrfs_put_root() call.\n\n## Affected\n\n- `Linux >= 24213fa46c7080c31d79aa2e3e2f0d9480cab700 < f89df93e8aefa4c1c813f835559f2ac727f79766`\n- `Linux >= 24213fa46c7080c31d79aa2e3e2f0d9480cab700 < 3f586b4c92e4272fcd01bf0db0590b63acf3e85b`\n- `Linux >= 24213fa46c7080c31d79aa2e3e2f0d9480cab700 < b3d39b03799600c76c33486e2d29b73a771023db`\n- `Linux >= 24213fa46c7080c31d79aa2e3e2f0d9480cab700 < 72f673d1c1deb819554d3e7e154f6d84301eb735`\n- `Linux >= 24213fa46c7080c31d79aa2e3e2f0d9480cab700 < 60a23d4ea169e27403f3bb023bb98036797c0206`\n- `Linux >= 24213fa46c7080c31d79aa2e3e2f0d9480cab700 < 7591d1727067d6063247901ad25c4bdc4e5695c4`\n- `Linux >= 24213fa46c7080c31d79aa2e3e2f0d9480cab700 < ce6050bafb4e33377dc17fcc357736bfc351180c`\n- `Linux 5.13`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}