CVE Database›CVE-2025-71268

CVE-2025-71268

kernel: btrfs: fix reservation leak in some error paths when inserting inline extent

Loading…

Severity

Low

Red Hat Product Security

3.3

CVSS 3.1

Review impact separately from score.

Published · March 18, 2026

Updated · July 30, 2026

Description

A resource leak was found in the Linux kernel's btrfs filesystem. In __cow_file_range_inline(), when path allocation or transaction join fails, the function returns without calling btrfs_qgroup_free_data() to release reserved qgroup data. This causes qgroup reservations to accumulate over time, potentially exhausting quota resources.

Statement

This flaw affects btrfs filesystems using qgroups for quota management. The resource leak occurs in error handling paths during inline extent insertion, which are uncommon failure scenarios (allocation failures). While repeated failures could exhaust qgroup quota space, this requires sustained error conditions and does not lead to memory corruption or code execution.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.1 · 3.3
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

CWE-772 · Missing Release of Resource after Effective Lifetime