CVE-2026-64356

In the Linux kernel, the following vulnerability has been resolved: xfs: fix memory leak in xfs_dqinode_metadir_create() If xfs_metadir_create() fails in xfs_dqinode_metadir_create(), the current code returns directly, leaking the allocated update and transaction state. If the subsequent commit fails, the caller-owned inode reference is left behind. Fix this memory leak by routing the create failure path through xfs_metadir_cancel(). For both create and commit failures, finish and release any inode returned to the caller, mirroring the unwind pattern in xfs_metadir_mkdir(). The bug was first flagged by an experimental analysis tool we are developing for kernel memory-management bugs while analyzing v6.13-rc1. The tool is still under development and is not yet publicly available. Manual inspection confirms that the bug is still present in v7.1.1. An x86_64 allyesconfig build showed no new warnings. Runtime validation used kprobe fault injection during `mount -o uquota` on a metadir XFS image. Injecting xfs_metadir_create() reproduced the old active-update path that left mount stuck later in mount setup; after this change, the same injection reported cancel_hits=1 and irele_hits=1. Injecting xfs_metadir_commit() exercised the old inode-reference leak path; after this change, it reported irele_hits=1.

• CWE-401

• https://git.kernel.org/stable/c/06a2e6dbaa26c0740ac76dfa66b0aedc78d05820Patch
• https://git.kernel.org/stable/c/45de375b25060edf46e20abb36521ba530336cebPatch
• https://git.kernel.org/stable/c/c3d3d2212c2966973dd7d603c6c6e6ed6fc7fbe1Patch

Published

Jul 25, 2026

Last Modified

Sep 4, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-64350In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2026-64351In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2026-64352In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2026-64353In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2026-64354In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2026-64355In the Linux kernel, the following vulnerability has been re…9.8
• CVE-2026-64357In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2026-64358In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2026-64359In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2026-64360In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2026-64361In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2026-64362In the Linux kernel, the following vulnerability has been re…7.8