Medium severity · published May 27, 2026
CVE-2026-46046
ext4: fix missing brelse() in ext4_xattr_inode_dec_ref_all()
5.5
CVSS
0.1%
EPSS
No
On KEV
Description
In the Linux kernel, the following vulnerability has been resolved:
ext4: fix missing brelse() in ext4_xattr_inode_dec_ref_all()
The commit c8e008b60492 ("ext4: ignore xattrs past end")
introduced a refcount leak in when block_csum is false.
ext4_xattr_inode_dec_ref_all() calls ext4_get_inode_loc() to
get iloc.bh, but never releases it with brelse().
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
None
Integrity
None
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.1% · higher than 2% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
KE
Kernel · Linux
5.4.293 before 5.5; 5.10.237 before 5.10.258; 5.15.181 before 5.15.209; 6.1.135 before 6.1.175; 6.6.88 before 6.6.140; 6.12.24 before 6.12.86; +3 more · source: NVD
LI
Linux · Linux
76c365fa7e2a8bb85f0190cdb4b8cdc99b2fdce3 before dd98a5603a212ea9c96c6982ccdbcc748fdb9a56; f737418b6de31c962c7192777ee4018906975383 before 153ab2c52355fbebcae622db8e7b506492c73a29; cf9291a3449b04688b81e32621e88de8f4314b54 before b706d00206a9e82362a9633efbd8b5775650169b; 362a90cecd36e8a5c415966d0b75b04a0270e4dd before 1bc1107a3a403a6d440673ed6666f7b07ef868a8; eb59cc31b6ea076021d14b04e7faab1636b87d0e before 097227f1ffe1a85bc3c359f81c71e3d40e06e920; c8e008b60492cf6fd31ef127aea6d02fd3d314cd before 1e6b0a69bf2c9c819255c7566e4355536d81d9cf; +14 more · source: vendor
SS
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · Siemens
V3.1.6; V3.1.7; V3.1.6; V3.1.7 · source: CISA
SS
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · Siemens
V3.1.6; V3.1.7; V3.1.6; V3.1.7 · source: CISA
SS
SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · Siemens
0 · source: CISA
SS
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · Siemens
V3.1.6; V3.1.7 · source: CISA
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-46046
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-46046
Patch
https://git.kernel.org/stable/c/097227f1ffe1a85bc3c359f81c71e3d40e06e920
Patch
https://git.kernel.org/stable/c/153ab2c52355fbebcae622db8e7b506492c73a29
Patch
https://git.kernel.org/stable/c/1bc1107a3a403a6d440673ed6666f7b07ef868a8
Patch
https://git.kernel.org/stable/c/1e6b0a69bf2c9c819255c7566e4355536d81d9cf
Patch
https://git.kernel.org/stable/c/77d059519382bd66283e6a4e83ee186e87e7708f
Patch
https://git.kernel.org/stable/c/b706d00206a9e82362a9633efbd8b5775650169b
More from Kernel
9.8
CVE-2025-39682
tls: fix handling of zero-length records on the rx_list
8.8
CVE-2026-53266
netfilter: bridge: make ebt_snat ARP rewrite writable
8.8
CVE-2013-6282
Linux Kernel Improper Input Validation Vulnerability
8.4
CVE-2022-0185
Linux Kernel Heap-Based Buffer Overflow Vulnerability
8.4
CVE-2013-2094
Linux Kernel Privilege Escalation Vulnerability