---
id: CVE-2026-68422
title: 'btrfs: fix root leak if its reloc root is unexpected in merge_reloc_roots()'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  btrfs: fix root leak if its reloc root is unexpected in merge_reloc_roots()

  If we have an unexpected reloc_root for our root, we jump to the out label
  but never drop t…
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= 24213fa46c7080c31d79aa2e3e2f0d9480cab700 <
    f89df93e8aefa4c1c813f835559f2ac727f79766
  - >-
    Linux >= 24213fa46c7080c31d79aa2e3e2f0d9480cab700 <
    3f586b4c92e4272fcd01bf0db0590b63acf3e85b
  - >-
    Linux >= 24213fa46c7080c31d79aa2e3e2f0d9480cab700 <
    b3d39b03799600c76c33486e2d29b73a771023db
  - >-
    Linux >= 24213fa46c7080c31d79aa2e3e2f0d9480cab700 <
    72f673d1c1deb819554d3e7e154f6d84301eb735
  - >-
    Linux >= 24213fa46c7080c31d79aa2e3e2f0d9480cab700 <
    60a23d4ea169e27403f3bb023bb98036797c0206
  - >-
    Linux >= 24213fa46c7080c31d79aa2e3e2f0d9480cab700 <
    7591d1727067d6063247901ad25c4bdc4e5695c4
  - >-
    Linux >= 24213fa46c7080c31d79aa2e3e2f0d9480cab700 <
    ce6050bafb4e33377dc17fcc357736bfc351180c
  - Linux 5.13
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-11-06T16:49:10.686540Z'
published: '2026-08-10'
updated: '2026-11-06'
sourceUpdated: '2026-11-06T16:55:16.265Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-68422'
references:
  - url: 'https://git.kernel.org/stable/c/f89df93e8aefa4c1c813f835559f2ac727f79766'
  - url: 'https://git.kernel.org/stable/c/3f586b4c92e4272fcd01bf0db0590b63acf3e85b'
  - url: 'https://git.kernel.org/stable/c/b3d39b03799600c76c33486e2d29b73a771023db'
  - url: 'https://git.kernel.org/stable/c/72f673d1c1deb819554d3e7e154f6d84301eb735'
  - url: 'https://git.kernel.org/stable/c/60a23d4ea169e27403f3bb023bb98036797c0206'
  - url: 'https://git.kernel.org/stable/c/7591d1727067d6063247901ad25c4bdc4e5695c4'
  - url: 'https://git.kernel.org/stable/c/ce6050bafb4e33377dc17fcc357736bfc351180c'
tags:
  - cve.org
epss: 0.00215
epssPercentile: 0.11957
ingestedAt: '2026-11-06T18:00:12.603Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

btrfs: fix root leak if its reloc root is unexpected in merge_reloc_roots()

If we have an unexpected reloc_root for our root, we jump to the out label
but never drop the reference we obtained for root, resulting in a leak.
Add a missing btrfs_put_root() call.

## Affected

- `Linux >= 24213fa46c7080c31d79aa2e3e2f0d9480cab700 < f89df93e8aefa4c1c813f835559f2ac727f79766`
- `Linux >= 24213fa46c7080c31d79aa2e3e2f0d9480cab700 < 3f586b4c92e4272fcd01bf0db0590b63acf3e85b`
- `Linux >= 24213fa46c7080c31d79aa2e3e2f0d9480cab700 < b3d39b03799600c76c33486e2d29b73a771023db`
- `Linux >= 24213fa46c7080c31d79aa2e3e2f0d9480cab700 < 72f673d1c1deb819554d3e7e154f6d84301eb735`
- `Linux >= 24213fa46c7080c31d79aa2e3e2f0d9480cab700 < 60a23d4ea169e27403f3bb023bb98036797c0206`
- `Linux >= 24213fa46c7080c31d79aa2e3e2f0d9480cab700 < 7591d1727067d6063247901ad25c4bdc4e5695c4`
- `Linux >= 24213fa46c7080c31d79aa2e3e2f0d9480cab700 < ce6050bafb4e33377dc17fcc357736bfc351180c`
- `Linux 5.13`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.