CVE-2026-68450

A flaw was found in the Linux kernel's btrfs filesystem. When the __add_reloc_root() function attempts to insert a duplicate mapping node into the reloc_root_tree, the newly allocated node is not properly freed. This oversight can lead to a memory leak, potentially causing resource exhaustion and a Denial of Service (DoS) over an extended period if this unexpected path is triggered.

Red Hat has determined that this vulnerability does not pose a significant risk. The memory leak occurs on a defensive error path that upstream callers assert should never be reached, and triggering btrfs relocation requires administrative privileges. Red Hat may apply this fix in a future kernel update.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

There is no mitigation for this flaw. Systems not using btrfs filesystems are not affected in practice, as the vulnerable code path is only reached during btrfs block group relocation operations.