Back to CVE records
Not yet scoredPublished Oct 18, 2026
CVE-2026-98448xfs: release orphanage dir inode if chown fails
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Start free and add your stack
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: xfs: release orphanage dir inode if chown fails LOLLM points out that we leak the igrab'd reference to the orphanage directory inode if chowning it fails. Fix that.
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Oct 19, 2026
- First seen by InfoSec Signals
- Oct 18, 2026
Affected products
Linux Linux linux:linux (from the name) | from 1e58a8ccf2597c9259a8e71a2bffac5e11e12ea0 before 6b66b1a59df6c3f9b4ad9b39a32ca86170ade357; from 1e58a8ccf2597c9259a8e71a2bffac5e11e12ea0 before 6a65a68097a1903988b256d5b367da7b0863a1d5; from 1e58a8ccf2597c9259a8e71a2bffac5e11e12ea0 before f813aefd9e09c8cda38a71580b6a01552d97cade; 1e58a8ccf2597c9259a8e71a2bffac5e11e12ea0 builds before 1c32cdc986467eaffeedb6c5334852809555b82d | CNA record |
References
- https://git.kernel.org/stable/c/6b66b1a59df6c3f9b4ad9b39a32ca86170ade357
- https://git.kernel.org/stable/c/6a65a68097a1903988b256d5b367da7b0863a1d5
- https://git.kernel.org/stable/c/f813aefd9e09c8cda38a71580b6a01552d97cade
- https://git.kernel.org/stable/c/1c32cdc986467eaffeedb6c5334852809555b82d
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.