CVE-2025-71268
kernel: btrfs: fix reservation leak in some error paths when inserting inline extent
Severity
LowRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · March 18, 2026
Updated · July 30, 2026
Description
A resource leak was found in the Linux kernel's btrfs filesystem. In __cow_file_range_inline(), when path allocation or transaction join fails, the function returns without calling btrfs_qgroup_free_data() to release reserved qgroup data. This causes qgroup reservations to accumulate over time, potentially exhausting quota resources.
Statement
This flaw affects btrfs filesystems using qgroups for quota management. The resource leak occurs in error handling paths during inline extent insertion, which are uncommon failure scenarios (allocation failures). While repeated failures could exhaust qgroup quota space, this requires sustained error conditions and does not lead to memory corruption or code execution.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 3.3CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
CWE-772 · Missing Release of Resource after Effective Lifetime