CVE-2026-23145None▾ SunlitIn the Linux kernel, the following vulnerability has been resolved: ext4: fix iloc.bh leak in ext4_xattr_inode_update_ref The error branch for ext4_xattr_inode_update_ref forget to release the refcount for iloc.bh. Find this when revie…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 2.8 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake.
Exploit-prediction probability, daily snapshots since Oct 19.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
Last analysed / modified upstream
0.1%
0.1% → 0.1%
In the Linux kernel, the following vulnerability has been resolved:
ext4: fix iloc.bh leak in ext4_xattr_inode_update_ref
The error branch for ext4_xattr_inode_update_ref forget to release the refcount for iloc.bh. Find this when review code.
Linux >= 1cfb3e4ddbdc8e02e637b8852540bd4718bf4814 < 7c9f059c3d531a12d7ad96cd34a44b8af7c00d5fLinux >= 505e69f76ac497e788f4ea0267826ec7266b40c8 < 6241cd1d0acc2363016ac55b8773ba1332dd59d7Linux >= 3d6269028246f4484bfed403c947a114bb583631 < 3b00c16e42428a1ecd3a5eb9cc37f8ad9bd47626Linux >= 79ea7f3e11effe1bd9e753172981d9029133a278 < 0b06cde92f2f960f4ebe3c988c69f2711f2a24dcLinux >= 6b879c4c6bbaab03c0ad2a983953bd1410bb165e < 8e8542c539927ae3898a4d02941f84e252e2dea1Linux >= 57295e835408d8d425bef58da5253465db3d6888 < 06e26287f2e349a28ad363941ffd9076bfed8b2eLinux >= 57295e835408d8d425bef58da5253465db3d6888 < d250bdf531d9cd4096fedbb9f172bb2ca660c868Linux ea39e712c2f5ae148ee5515798ae03523673e002Linux 440b003f449a4ff2a00b08c8eab9ba5cd28f3943Linux >= 5.10.246 < 5.10.249Linux >= 5.15.195 < 5.15.199Linux >= 6.1.157 < 6.1.162Linux >= 6.6.113 < 6.6.122Linux >= 6.12.54 < 6.12.67Linux >= 5.4.301 < 5.5Linux >= 6.17.4 < 6.18Linux 6.18Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-99118Nonedrm/i915/dmc: Harden DMC firmware payload parsing
CVE-2026-99117Nonenet: bridge: mcast: don't truncate the port group walk on teardown
CVE-2026-99121Noneipv4: avoid divide by zero in fib_rebalance
CVE-2026-99120NoneKVM: x86/mmu: Cope with the SS bit being set in #NPF exit codes
CVE-2026-99119Nonedrm/amdgpu/userq: actually validate userq BOs
CVE-2026-99123Nonevsock/virtio: validate packet source for connected sockets