CVE-2026-23147
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
14/02/2026
Last modified:
17/03/2026
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
btrfs: zlib: fix the folio leak on S390 hardware acceleration<br />
<br />
[BUG]<br />
After commit aa60fe12b4f4 ("btrfs: zlib: refactor S390x HW acceleration<br />
buffer preparation"), we no longer release the folio of the page cache<br />
of folio returned by btrfs_compress_filemap_get_folio() for S390<br />
hardware acceleration path.<br />
<br />
[CAUSE]<br />
Before that commit, we call kumap_local() and folio_put() after handling<br />
each folio.<br />
<br />
Although the timing is not ideal (it release previous folio at the<br />
beginning of the loop, and rely on some extra cleanup out of the loop),<br />
it at least handles the folio release correctly.<br />
<br />
Meanwhile the refactored code is easier to read, it lacks the call to<br />
release the filemap folio.<br />
<br />
[FIX]<br />
Add the missing folio_put() for copy_data_into_buffer().
Impact
Base Score 3.x
5.50
Severity 3.x
MEDIUM
Vulnerable products and versions
| CPE | From | Up to |
|---|---|---|
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 6.15 (including) | 6.18.9 (excluding) |
| cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:* | ||
| cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:* | ||
| cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:* | ||
| cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:* | ||
| cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:* | ||
| cpe:2.3:o:linux:linux_kernel:6.19:rc6:*:*:*:*:*:* | ||
| cpe:2.3:o:linux:linux_kernel:6.19:rc7:*:*:*:*:*:* |
To consult the complete list of CPE names with products and versions, see this page



