CVE-2026-46164

kernel: btrfs: fix double free in create_space_info_sub_group() error path

Loading…

Severity

Moderate

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · May 28, 2026

Updated · October 20, 2026

Description

A flaw was found in the Linux kernel's btrfs filesystem. This vulnerability, a double free, occurs in the create_space_info_sub_group() function's error handling path. When kobject_init_and_add() fails, a memory region can be freed twice. This can lead to memory corruption, potentially resulting in a denial of service or other unpredictable system behavior.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE-1341 · Multiple Releases of Same Resource or Handle