---
id: CVE-2026-45948
title: 'ext4: fix memory leak in ext4_ext_shift_extents()'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  ext4: fix memory leak in ext4_ext_shift_extents()

  In ext4_ext_shift_extents(), if the extent is NULL in the while loop, the
  function returns immediately without releas…
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= a18ed359bdddcded4f97ff5e2f07793ff9336913 <
    7e807cb8603b7664fa630a696cd891d9a03c248d
  - >-
    Linux >= a18ed359bdddcded4f97ff5e2f07793ff9336913 <
    afc5e61e1a07b2b833bd72cbee36ecce9cd901e2
  - >-
    Linux >= a18ed359bdddcded4f97ff5e2f07793ff9336913 <
    1bce219ee5512cf179ba40cf114945a14a16e21f
  - >-
    Linux >= a18ed359bdddcded4f97ff5e2f07793ff9336913 <
    4a79fde8db7eba7f1128d971ceba4e3c9ac84aec
  - >-
    Linux >= a18ed359bdddcded4f97ff5e2f07793ff9336913 <
    2f4b1052246ca646bb17bfe0f53df2fdf9729b58
  - >-
    Linux >= a18ed359bdddcded4f97ff5e2f07793ff9336913 <
    12615ab4bfb69678e5d961b28bb70040299e51b1
  - >-
    Linux >= a18ed359bdddcded4f97ff5e2f07793ff9336913 <
    bd7b52557e4a3ccd7595fdb3a585f1257de57935
  - >-
    Linux >= a18ed359bdddcded4f97ff5e2f07793ff9336913 <
    ca81109d4a8f192dc1cbad4a1ee25246363c2833
  - Linux 3.15
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-11-06T16:02:42.810876Z'
published: '2026-05-27'
updated: '2026-11-06'
sourceUpdated: '2026-11-06T16:03:16.054Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-45948'
references:
  - url: 'https://git.kernel.org/stable/c/7e807cb8603b7664fa630a696cd891d9a03c248d'
  - url: 'https://git.kernel.org/stable/c/afc5e61e1a07b2b833bd72cbee36ecce9cd901e2'
  - url: 'https://git.kernel.org/stable/c/1bce219ee5512cf179ba40cf114945a14a16e21f'
  - url: 'https://git.kernel.org/stable/c/4a79fde8db7eba7f1128d971ceba4e3c9ac84aec'
  - url: 'https://git.kernel.org/stable/c/2f4b1052246ca646bb17bfe0f53df2fdf9729b58'
  - url: 'https://git.kernel.org/stable/c/12615ab4bfb69678e5d961b28bb70040299e51b1'
  - url: 'https://git.kernel.org/stable/c/bd7b52557e4a3ccd7595fdb3a585f1257de57935'
  - url: 'https://git.kernel.org/stable/c/ca81109d4a8f192dc1cbad4a1ee25246363c2833'
tags:
  - cve.org
epss: 0.0016
epssPercentile: 0.05198
ingestedAt: '2026-11-06T16:57:43.374Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

ext4: fix memory leak in ext4_ext_shift_extents()

In ext4_ext_shift_extents(), if the extent is NULL in the while loop, the
function returns immediately without releasing the path obtained via
ext4_find_extent(), leading to a memory leak.

Fix this by jumping to the out label to ensure the path is properly
released.

## Affected

- `Linux >= a18ed359bdddcded4f97ff5e2f07793ff9336913 < 7e807cb8603b7664fa630a696cd891d9a03c248d`
- `Linux >= a18ed359bdddcded4f97ff5e2f07793ff9336913 < afc5e61e1a07b2b833bd72cbee36ecce9cd901e2`
- `Linux >= a18ed359bdddcded4f97ff5e2f07793ff9336913 < 1bce219ee5512cf179ba40cf114945a14a16e21f`
- `Linux >= a18ed359bdddcded4f97ff5e2f07793ff9336913 < 4a79fde8db7eba7f1128d971ceba4e3c9ac84aec`
- `Linux >= a18ed359bdddcded4f97ff5e2f07793ff9336913 < 2f4b1052246ca646bb17bfe0f53df2fdf9729b58`
- `Linux >= a18ed359bdddcded4f97ff5e2f07793ff9336913 < 12615ab4bfb69678e5d961b28bb70040299e51b1`
- `Linux >= a18ed359bdddcded4f97ff5e2f07793ff9336913 < bd7b52557e4a3ccd7595fdb3a585f1257de57935`
- `Linux >= a18ed359bdddcded4f97ff5e2f07793ff9336913 < ca81109d4a8f192dc1cbad4a1ee25246363c2833`
- `Linux 3.15`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.