CVE-2026-45948

Summary

In the Linux kernel, the following vulnerability has been resolved:

ext4: fix memory leak in ext4_ext_shift_extents()

In ext4_ext_shift_extents(), if the extent is NULL in the while loop, the function returns immediately without releasing the path obtained via ext4_find_extent(), leading to a memory leak.

Fix this by jumping to the out label to ensure the path is properly released.

Affected Software

VendorProductVersion RangeStatus
LinuxLinuxa18ed359bdddcded4f97ff5e2f07793ff9336913 < 7e807cb8603b7664fa630a696cd891d9a03c248daffected
LinuxLinuxa18ed359bdddcded4f97ff5e2f07793ff9336913 < afc5e61e1a07b2b833bd72cbee36ecce9cd901e2affected
LinuxLinuxa18ed359bdddcded4f97ff5e2f07793ff9336913 < 1bce219ee5512cf179ba40cf114945a14a16e21faffected
LinuxLinuxa18ed359bdddcded4f97ff5e2f07793ff9336913 < 4a79fde8db7eba7f1128d971ceba4e3c9ac84aecaffected
LinuxLinuxa18ed359bdddcded4f97ff5e2f07793ff9336913 < 2f4b1052246ca646bb17bfe0f53df2fdf9729b58affected
LinuxLinuxa18ed359bdddcded4f97ff5e2f07793ff9336913 < 12615ab4bfb69678e5d961b28bb70040299e51b1affected
LinuxLinuxa18ed359bdddcded4f97ff5e2f07793ff9336913 < bd7b52557e4a3ccd7595fdb3a585f1257de57935affected
LinuxLinuxa18ed359bdddcded4f97ff5e2f07793ff9336913 < ca81109d4a8f192dc1cbad4a1ee25246363c2833affected
LinuxLinux3.15affected
LinuxLinux0 < 3.15unaffected
LinuxLinux5.10.252 <= 5.10.*unaffected
LinuxLinux5.15.202 <= 5.15.*unaffected
LinuxLinux6.1.165 <= 6.1.*unaffected
LinuxLinux6.6.128 <= 6.6.*unaffected
LinuxLinux6.12.75 <= 6.12.*unaffected
LinuxLinux6.18.14 <= 6.18.*unaffected
LinuxLinux6.19.4 <= 6.19.*unaffected
LinuxLinux7.0 <= *unaffected

Weaknesses

References