CVE-2026-23145: Linux Kernel

Medium severity, CVSS 5.5. EPSS: 0.1% chance of exploitation in the next 30 days.

In the Linux kernel, the following vulnerability has been resolved: ext4: fix iloc.bh leak in ext4_xattr_inode_update_ref The error branch for ext4_xattr_inode_update_ref forget to release the refcount for iloc.bh. Find this when review code.

Affected products

• Linux Linux Kernel: from 5.4.301, before 5.5 (fixed in 5.5); from 5.10.246, before 5.10.249 (fixed in 5.10.249); from 5.15.195, before 5.15.199 (fixed in 5.15.199); from 6.1.157, before 6.1.162 (fixed in 6.1.162); from 6.6.113, before 6.6.122 (fixed in 6.6.122); from 6.12.54, before 6.12.67 (fixed in 6.12.67); …

Published 2026-02-14. Last modified 2026-06-17.