CVE-2026-99067
Full vulnerability record from the local CVENow database.
Description
In the Linux kernel, the following vulnerability has been resolved: btrfs: scrub: fix local_root reference leak in scrub_print_warning_inode() When paths_from_inode() fails, scrub_print_warning_inode() jumps to err without dropping the reference taken by btrfs_get_fs_root(), leaking a reference to the root every time path resolution fails while printing scrub warnings. Every other error and success path of the function drops the reference. Drop the reference on the paths_from_inode() failure path too.
Severity
Not scored
CVSS score
Not available
Vulnerability status
Received
Source identifier
416baaa9-dc9f-4396-8d5f-8c081fb06d67
Published
2026-10-23 13:17:30.583000
Last modified
2026-10-30 13:21:43.170000
View original CVE JSON
{
"id": "CVE-2026-99067",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2026-10-23T13:17:30.583",
"lastModified": "2026-10-30T13:21:43.170",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "In the Linux kernel, the following vulnerability has been resolved:\n\nbtrfs: scrub: fix local_root reference leak in scrub_print_warning_inode()\n\nWhen paths_from_inode() fails, scrub_print_warning_inode() jumps to err\nwithout dropping the reference taken by btrfs_get_fs_root(), leaking a\nreference to the root every time path resolution fails while printing\nscrub warnings. Every other error and success path of the function\ndrops the reference.\n\nDrop the reference on the paths_from_inode() failure path too."
}
],
"affected": [
{
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"affectedData": [
{
"vendor": "Linux",
"product": "Linux",
"defaultStatus": "unaffected",
"programFiles": [
"fs/btrfs/scrub.c"
],
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"versions": [
{
"version": "558540c17771eaf89b1a3be39aa2c8bc837da1a6",
"lessThan": "caebda739a724f0db57753351c01eaf2bf610576",
"versionType": "git",
"status": "affected"
},
{
"version": "558540c17771eaf89b1a3be39aa2c8bc837da1a6",
"lessThan": "fc6d6b17584de7fb616b011e01f008ec3328063f",
"versionType": "git",
"status": "affected"
},
{
"version": "558540c17771eaf89b1a3be39aa2c8bc837da1a6",
"lessThan": "e8d5cdd2b2e88177334326b002a58a5fae6e380c",
"versionType": "git",
"status": "affected"
},
{
"version": "558540c17771eaf89b1a3be39aa2c8bc837da1a6",
"lessThan": "41cabfbf3532e2a2a17be9e4876042a5393b5c8d",
"versionType": "git",
"status": "affected"
},
{
"version": "558540c17771eaf89b1a3be39aa2c8bc837da1a6",
"lessThan": "452a435b74f7f598a343c51f7c89c5d2244384b6",
"versionType": "git",
"status": "affected"
},
{
"version": "558540c17771eaf89b1a3be39aa2c8bc837da1a6",
"lessThan": "12ba7d8b9cd45a2c6aa8f37c3f4b8a50422fb549",
"versionType": "git",
"status": "affected"
},
{
"version": "558540c17771eaf89b1a3be39aa2c8bc837da1a6",
"lessThan": "a7e5992bc37088f9b00e531955022aef69de3dc7",
"versionType": "git",
"status": "affected"
},
{
"version": "558540c17771eaf89b1a3be39aa2c8bc837da1a6",
"lessThan": "1fd742c7479961da6d0bb794ef8ac6b7b9442847",
"versionType": "git",
"status": "affected"
}
]
},
{
"vendor": "Linux",
"product": "Linux",
"defaultStatus": "affected",
"programFiles": [
"fs/btrfs/scrub.c"
],
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"versions": [
{
"version": "3.2",
"status": "affected"
},
{
"version": "0",
"lessThan": "3.2",
"versionType": "semver",
"status": "unaffected"
},
{
"version": "5.10.273",
"lessThanOrEqual": "5.10.*",
"versionType": "semver",
"status": "unaffected"
},
{
"version": "5.15.224",
"lessThanOrEqual": "5.15.*",
"versionType": "semver",
"status": "unaffected"
},
{
"version": "6.1.191",
"lessThanOrEqual": "6.1.*",
"versionType": "semver",
"status": "unaffected"
},
{
"version": "6.6.160",
"lessThanOrEqual": "6.6.*",
"versionType": "semver",
"status": "unaffected"
},
{
"version": "6.12.113",
"lessThanOrEqual": "6.12.*",
"versionType": "semver",
"status": "unaffected"
},
{
"version": "6.18.57",
"lessThanOrEqual": "6.18.*",
"versionType": "semver",
"status": "unaffected"
},
{
"version": "7.2.11",
"lessThanOrEqual": "7.2.*",
"versionType": "semver",
"status": "unaffected"
},
{
"version": "7.3",
"lessThanOrEqual": "*",
"versionType": "original_commit_for_fix",
"status": "unaffected"
}
]
}
]
}
],
"metrics": {},
"references": [
{
"url": "https://git.kernel.org/stable/c/12ba7d8b9cd45a2c6aa8f37c3f4b8a50422fb549",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/1fd742c7479961da6d0bb794ef8ac6b7b9442847",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/41cabfbf3532e2a2a17be9e4876042a5393b5c8d",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/452a435b74f7f598a343c51f7c89c5d2244384b6",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/a7e5992bc37088f9b00e531955022aef69de3dc7",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/caebda739a724f0db57753351c01eaf2bf610576",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/e8d5cdd2b2e88177334326b002a58a5fae6e380c",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/fc6d6b17584de7fb616b011e01f008ec3328063f",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
}
]
}