CVE-2026-64146

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> erofs: fix metabuf leak in inode xattr initialization<br /> <br /> commit bb88e8da0025 ("erofs: use meta buffers for xattr operations")<br /> converted xattr operations to use on-stack erofs_buf instances.<br /> erofs_init_inode_xattrs() uses such a metabuf while reading the inline<br /> xattr header and shared xattr id array.<br /> <br /> Some error paths after erofs_read_metabuf() leave through out_unlock<br /> without dropping the metabuf, so the folio reference can leak.<br /> <br /> Consolidate the cleanup at out_unlock. erofs_put_metabuf() is a<br /> no-op if no folio has been acquired, and this keeps all paths after<br /> taking EROFS_I_BL_XATTR_BIT covered by a single cleanup site.