{"id":"CVE-2026-68422","state":"PUBLISHED","title":"btrfs: fix root leak if its reloc root is unexpected in merge_reloc_roots()","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nbtrfs: fix root leak if its reloc root is unexpected in merge_reloc_roots()\n\nIf we have an unexpected reloc_root for our root, we jump to the out label\nbut never drop the reference we obtained for root, resulting in a leak.\nAdd a missing btrfs_put_root() call.","publishedAt":"2026-08-10T12:04:42.949Z","updatedAt":"2026-08-19T16:35:17.540Z","severity":null,"assigner":"Linux","products":["Linux Linux"],"affected":[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","versions":[{"version":"24213fa46c7080c31d79aa2e3e2f0d9480cab700","status":"affected","lessThan":"f89df93e8aefa4c1c813f835559f2ac727f79766","versionType":"git"},{"version":"24213fa46c7080c31d79aa2e3e2f0d9480cab700","status":"affected","lessThan":"3f586b4c92e4272fcd01bf0db0590b63acf3e85b","versionType":"git"},{"version":"24213fa46c7080c31d79aa2e3e2f0d9480cab700","status":"affected","lessThan":"b3d39b03799600c76c33486e2d29b73a771023db","versionType":"git"},{"version":"24213fa46c7080c31d79aa2e3e2f0d9480cab700","status":"affected","lessThan":"72f673d1c1deb819554d3e7e154f6d84301eb735","versionType":"git"},{"version":"24213fa46c7080c31d79aa2e3e2f0d9480cab700","status":"affected","lessThan":"60a23d4ea169e27403f3bb023bb98036797c0206","versionType":"git"},{"version":"24213fa46c7080c31d79aa2e3e2f0d9480cab700","status":"affected","lessThan":"7591d1727067d6063247901ad25c4bdc4e5695c4","versionType":"git"},{"version":"24213fa46c7080c31d79aa2e3e2f0d9480cab700","status":"affected","lessThan":"ce6050bafb4e33377dc17fcc357736bfc351180c","versionType":"git"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["fs/btrfs/relocation.c"]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","versions":[{"version":"5.13","status":"affected"},{"version":"0","status":"unaffected","lessThan":"5.13","versionType":"semver"},{"version":"5.15.216","status":"unaffected","lessThanOrEqual":"5.15.*","versionType":"semver"},{"version":"6.1.183","status":"unaffected","lessThanOrEqual":"6.1.*","versionType":"semver"},{"version":"6.6.148","status":"unaffected","lessThanOrEqual":"6.6.*","versionType":"semver"},{"version":"6.12.101","status":"unaffected","lessThanOrEqual":"6.12.*","versionType":"semver"},{"version":"6.18.42","status":"unaffected","lessThanOrEqual":"6.18.*","versionType":"semver"},{"version":"7.1.6","status":"unaffected","lessThanOrEqual":"7.1.*","versionType":"semver"},{"version":"7.2","status":"unaffected","lessThanOrEqual":"*","versionType":"original_commit_for_fix"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["fs/btrfs/relocation.c"]}],"references":["https://git.kernel.org/stable/c/f89df93e8aefa4c1c813f835559f2ac727f79766","https://git.kernel.org/stable/c/3f586b4c92e4272fcd01bf0db0590b63acf3e85b","https://git.kernel.org/stable/c/b3d39b03799600c76c33486e2d29b73a771023db","https://git.kernel.org/stable/c/72f673d1c1deb819554d3e7e154f6d84301eb735","https://git.kernel.org/stable/c/60a23d4ea169e27403f3bb023bb98036797c0206","https://git.kernel.org/stable/c/7591d1727067d6063247901ad25c4bdc4e5695c4","https://git.kernel.org/stable/c/ce6050bafb4e33377dc17fcc357736bfc351180c"],"weaknesses":[],"ingestedAt":"2026-10-29T20:12:49.727Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2026/68xxx/CVE-2026-68422.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2026-68422","state":"PUBLISHED","datePublished":"2026-08-10T12:04:42.949Z","dateUpdated":"2026-08-19T16:35:17.540Z","assignerShortName":"Linux","assignerOrgId":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","dateReserved":"2026-07-30T09:28:09.392Z"},"containers":{"cna":{"title":"btrfs: fix root leak if its reloc root is unexpected in merge_reloc_roots()","descriptions":[{"lang":"en","value":"In the Linux kernel, the following vulnerability has been resolved:\n\nbtrfs: fix root leak if its reloc root is unexpected in merge_reloc_roots()\n\nIf we have an unexpected reloc_root for our root, we jump to the out label\nbut never drop the reference we obtained for root, resulting in a leak.\nAdd a missing btrfs_put_root() call."}],"affected":[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","versions":[{"version":"24213fa46c7080c31d79aa2e3e2f0d9480cab700","status":"affected","lessThan":"f89df93e8aefa4c1c813f835559f2ac727f79766","versionType":"git"},{"version":"24213fa46c7080c31d79aa2e3e2f0d9480cab700","status":"affected","lessThan":"3f586b4c92e4272fcd01bf0db0590b63acf3e85b","versionType":"git"},{"version":"24213fa46c7080c31d79aa2e3e2f0d9480cab700","status":"affected","lessThan":"b3d39b03799600c76c33486e2d29b73a771023db","versionType":"git"},{"version":"24213fa46c7080c31d79aa2e3e2f0d9480cab700","status":"affected","lessThan":"72f673d1c1deb819554d3e7e154f6d84301eb735","versionType":"git"},{"version":"24213fa46c7080c31d79aa2e3e2f0d9480cab700","status":"affected","lessThan":"60a23d4ea169e27403f3bb023bb98036797c0206","versionType":"git"},{"version":"24213fa46c7080c31d79aa2e3e2f0d9480cab700","status":"affected","lessThan":"7591d1727067d6063247901ad25c4bdc4e5695c4","versionType":"git"},{"version":"24213fa46c7080c31d79aa2e3e2f0d9480cab700","status":"affected","lessThan":"ce6050bafb4e33377dc17fcc357736bfc351180c","versionType":"git"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["fs/btrfs/relocation.c"]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","versions":[{"version":"5.13","status":"affected"},{"version":"0","status":"unaffected","lessThan":"5.13","versionType":"semver"},{"version":"5.15.216","status":"unaffected","lessThanOrEqual":"5.15.*","versionType":"semver"},{"version":"6.1.183","status":"unaffected","lessThanOrEqual":"6.1.*","versionType":"semver"},{"version":"6.6.148","status":"unaffected","lessThanOrEqual":"6.6.*","versionType":"semver"},{"version":"6.12.101","status":"unaffected","lessThanOrEqual":"6.12.*","versionType":"semver"},{"version":"6.18.42","status":"unaffected","lessThanOrEqual":"6.18.*","versionType":"semver"},{"version":"7.1.6","status":"unaffected","lessThanOrEqual":"7.1.*","versionType":"semver"},{"version":"7.2","status":"unaffected","lessThanOrEqual":"*","versionType":"original_commit_for_fix"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["fs/btrfs/relocation.c"]}],"references":[{"url":"https://git.kernel.org/stable/c/f89df93e8aefa4c1c813f835559f2ac727f79766"},{"url":"https://git.kernel.org/stable/c/3f586b4c92e4272fcd01bf0db0590b63acf3e85b"},{"url":"https://git.kernel.org/stable/c/b3d39b03799600c76c33486e2d29b73a771023db"},{"url":"https://git.kernel.org/stable/c/72f673d1c1deb819554d3e7e154f6d84301eb735"},{"url":"https://git.kernel.org/stable/c/60a23d4ea169e27403f3bb023bb98036797c0206"},{"url":"https://git.kernel.org/stable/c/7591d1727067d6063247901ad25c4bdc4e5695c4"},{"url":"https://git.kernel.org/stable/c/ce6050bafb4e33377dc17fcc357736bfc351180c"}],"providerMetadata":{"shortName":"Linux","orgId":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","dateUpdated":"2026-08-19T16:35:17.540Z"},"cpeApplicability":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"5.13","versionEndExcluding":"5.15.216"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"5.13","versionEndExcluding":"6.1.183"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"5.13","versionEndExcluding":"6.6.148"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"5.13","versionEndExcluding":"6.12.101"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"5.13","versionEndExcluding":"6.18.42"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"5.13","versionEndExcluding":"7.1.6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"5.13","versionEndExcluding":"7.2"}]}]}],"x_generator":{"engine":"bippy-1.2.0"}}}}}