Memory Leak Vulnerability in Linux Kernel EROFS

CVE-2026-64146

What is CVE-2026-64146?

A memory leak vulnerability exists in the Linux kernel's EROFS (Enhanced Read-Only File System) where certain error paths do not properly release metabolization buffers during the initialization of inode extended attributes (xattrs). This oversight can result in leaked references to folios when the cleanup procedure is not consistently triggered, leading to resource exhaustion. Proper consolidation of the cleanup mechanism is required to address the issue and ensure all scenarios are accounted for.

References