CVE-2026-46005

Updated on 27 May 2026

Severity

5.5 Medium severity

Details

CVSS score
5.5

Overview

About vulnerability

In the Linux kernel, the following vulnerability has been resolved: xfs: fix a resource leak in xfs_alloc_buftarg() In the error path, call fs_put_dax() to drop the DAX device reference. A flaw was found in the Linux kernel’s xfs filesystem. This resource leak occurs in the xfs_alloc_buftarg() function’s error path, where a DAX (Direct Access) device reference is not properly dropped. An attacker could potentially exploit this flaw to cause resource exhaustion, leading to a Denial of Service (DoS) condition on the system.

Details

KernelCare state

Live-patch status from KernelCare for each operating system.

Operating system Status Covered kernels
Amazon Linux 2023 Planned
Debian 12 Planned
Debian 13 Released
6 kernels
  • 6.12.85-1
  • 6.12.73-1
  • 6.12.63-1
  • 6.12.74-1
  • 6.12.69-1
  • 6.12.74-2
Ubuntu 24.04 Planned