---
id: CVE-2026-46005
title: 'xfs: fix a resource leak in xfs_alloc_buftarg()'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  xfs: fix a resource leak in xfs_alloc_buftarg()

  In the error path, call fs_put_dax() to drop the DAX
  device reference.
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= 6f643c57d57c56d4677bc05f1fca2ef3f249797c <
    ed2d6442e61169e565727ba15c4f6a0cb5ce16df
  - >-
    Linux >= 6f643c57d57c56d4677bc05f1fca2ef3f249797c <
    82fb9da6477d08bdab954dc7bc081a41f2f9cae6
  - >-
    Linux >= 6f643c57d57c56d4677bc05f1fca2ef3f249797c <
    28a6c132b8c6e5eeefa889c4fb43d65b12989d48
  - >-
    Linux >= 6f643c57d57c56d4677bc05f1fca2ef3f249797c <
    5c293a1e1ef0f838772d20ae8afae4cbd87cd3f9
  - >-
    Linux >= 6f643c57d57c56d4677bc05f1fca2ef3f249797c <
    5804cb507233ed767a83ac70527b2f6c4566ec75
  - >-
    Linux >= 6f643c57d57c56d4677bc05f1fca2ef3f249797c <
    29a7b2614357393b176ef06ba5bc3ff5afc8df69
  - Linux 6.0
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-11-06T16:04:54.970480Z'
published: '2026-05-27'
updated: '2026-11-06'
sourceUpdated: '2026-11-06T16:13:31.579Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-46005'
references:
  - url: 'https://git.kernel.org/stable/c/ed2d6442e61169e565727ba15c4f6a0cb5ce16df'
  - url: 'https://git.kernel.org/stable/c/82fb9da6477d08bdab954dc7bc081a41f2f9cae6'
  - url: 'https://git.kernel.org/stable/c/28a6c132b8c6e5eeefa889c4fb43d65b12989d48'
  - url: 'https://git.kernel.org/stable/c/5c293a1e1ef0f838772d20ae8afae4cbd87cd3f9'
  - url: 'https://git.kernel.org/stable/c/5804cb507233ed767a83ac70527b2f6c4566ec75'
  - url: 'https://git.kernel.org/stable/c/29a7b2614357393b176ef06ba5bc3ff5afc8df69'
tags:
  - cve.org
epss: 0.00128
epssPercentile: 0.02471
ingestedAt: '2026-11-06T16:57:43.351Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

xfs: fix a resource leak in xfs_alloc_buftarg()

In the error path, call fs_put_dax() to drop the DAX
device reference.

## Affected

- `Linux >= 6f643c57d57c56d4677bc05f1fca2ef3f249797c < ed2d6442e61169e565727ba15c4f6a0cb5ce16df`
- `Linux >= 6f643c57d57c56d4677bc05f1fca2ef3f249797c < 82fb9da6477d08bdab954dc7bc081a41f2f9cae6`
- `Linux >= 6f643c57d57c56d4677bc05f1fca2ef3f249797c < 28a6c132b8c6e5eeefa889c4fb43d65b12989d48`
- `Linux >= 6f643c57d57c56d4677bc05f1fca2ef3f249797c < 5c293a1e1ef0f838772d20ae8afae4cbd87cd3f9`
- `Linux >= 6f643c57d57c56d4677bc05f1fca2ef3f249797c < 5804cb507233ed767a83ac70527b2f6c4566ec75`
- `Linux >= 6f643c57d57c56d4677bc05f1fca2ef3f249797c < 29a7b2614357393b176ef06ba5bc3ff5afc8df69`
- `Linux 6.0`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.