https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 11:03:30 +0000 https://vulnerability.circl.lu/vuln/cve-2024-41078 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>btrfs: qgroup: fix quota root leak after quota disable failure</p> <p>If during the quota disable we fail when cleaning the quota tree or when deleting the root from the root tree, we jump to the &#39;out&#39; label without ever dropping the reference on the quota root, resulting in a leak of the root since fs_info-&gt;quota_root is no longer pointing to the root (we have set it to NULL just before those steps).</p> <p>Fix this by always doing a btrfs_put_root() call under the &#39;out&#39; label. This is a problem that exists since qgroups were first added in 2012 by commit bed92eae26cc (&#34;Btrfs: qgroup implementation and prototypes&#34;), but back then we missed a kfree on the quota root and free_extent_buffer() calls on its root and commit root nodes, since back then roots were not yet reference counted.</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>btrfs: qgroup: fix quota root leak after quota disable failure</p> <p>If during the quota disable we fail when cleaning the quota tree or when deleting the root from the root tree, we jump to the &#39;out&#39; label without ever dropping the reference on the quota root, resulting in a leak of the root since fs_info-&gt;quota_root is no longer pointing to the root (we have set it to NULL just before those steps).</p> <p>Fix this by always doing a btrfs_put_root() call under the &#39;out&#39; label. This is a problem that exists since qgroups were first added in 2012 by commit bed92eae26cc (&#34;Btrfs: qgroup implementation and prototypes&#34;), but back then we missed a kfree on the quota root and free_extent_buffer() calls on its root and commit root nodes, since back then roots were not yet reference counted.</p> https://vulnerability.circl.lu/vuln/cve-2024-41078