linux-yocto/fs
Yang Erkun 06e26287f2 ext4: fix iloc.bh leak in ext4_xattr_inode_update_ref
commit d250bdf531d9cd4096fedbb9f172bb2ca660c868 upstream.

The error branch for ext4_xattr_inode_update_ref forget to release the
refcount for iloc.bh. Find this when review code.

Fixes: 57295e8354 ("ext4: guard against EA inode refcount underflow in xattr update")
Signed-off-by: Yang Erkun <yangerkun@huawei.com>
Reviewed-by: Baokun Li <libaokun1@huawei.com>
Reviewed-by: Zhang Yi <yi.zhang@huawei.com>
Link: https://patch.msgid.link/20251213055706.3417529-1-yangerkun@huawei.com
Signed-off-by: Theodore Ts'o <tytso@mit.edu>
Cc: stable@kernel.org
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2026-01-23 11:21:28 +01:00
..
9p 9p: fix cache/debug options printing in v9fs_show_options 2025-12-18 14:03:32 +01:00
adfs vfs-6.17-rc1.mmap_prepare 2025-07-28 13:43:25 -07:00
affs vfs-6.17-rc1.mmap_prepare 2025-07-28 13:43:25 -07:00
afs afs: Fix uninit var in afs_alloc_anon_key() 2025-11-28 16:48:18 -08:00
autofs new helper: set_default_d_op() 2025-06-10 22:21:16 -04:00
befs
bfs bfs: Reconstruct file type when loading from disk 2025-10-29 14:39:34 +01:00
btrfs btrfs: fix memory leaks in create_space_info() error paths 2026-01-23 11:21:17 +01:00
cachefiles VFS: unify old_mnt_idmap and new_mnt_idmap in renamedata 2025-09-23 12:37:35 +02:00
ceph libceph: drop started parameter of __ceph_open_session() 2025-11-26 23:29:11 +01:00
coda vfs-6.17-rc1.mmap_prepare 2025-07-28 13:43:25 -07:00
configfs file->f_path constification 2025-10-03 16:32:36 -07:00
cramfs Patch series in this pull request: 2025-10-02 18:44:54 -07:00
crypto fscrypt: fix left shift underflow when inode->i_blkbits > PAGE_SHIFT 2025-11-04 16:37:38 -08:00
debugfs vfs-6.18-rc1.async 2025-09-29 11:55:15 -07:00
devpts devpts, sunrpc, hostfs: don't bother with ->d_op 2025-06-11 13:40:04 -04:00
dlm dlm for 6.18 2025-09-29 15:24:58 -07:00
ecryptfs mount-related stuff for this cycle 2025-10-03 10:19:44 -07:00
efivarfs power: always freeze efivarfs 2025-11-12 10:12:39 +01:00
efs
erofs erofs: fix file-backed mounts no longer working on EROFS partitions 2026-01-17 16:35:30 +01:00
exfat exfat: zero out post-EOF page cache on file extension 2026-01-02 12:57:01 +01:00
exportfs exportfs: use lookup_one_unlocked() 2025-06-11 13:44:15 +02:00
ext2 \n 2025-07-28 16:16:09 -07:00
ext4 ext4: fix iloc.bh leak in ext4_xattr_inode_update_ref 2026-01-23 11:21:28 +01:00
f2fs f2fs: fix return value of f2fs_recover_fsync_data() 2026-01-02 12:57:18 +01:00
fat vfat: fix missing sb_min_blocksize() return value checks 2025-11-05 14:00:16 +01:00
freevxfs
fuse fuse: missing copy_finish in fuse-over-io-uring argument copies 2026-01-02 12:57:31 +01:00
gfs2 Revert "gfs2: Fix use of bio_chain" 2026-01-23 11:21:12 +01:00
hfs hfs: fix potential use after free in hfs_correct_next_unused_CNID() 2025-12-18 14:02:52 +01:00
hfsplus hfsplus: fix volume corruption issue for generic/101 2026-01-02 12:56:41 +01:00
hostfs hostfs: Fix only passing host root in boot stage with new mount 2025-10-21 14:22:42 +02:00
hpfs - Avoid -Wflex-array-member-not-at-end warnings 2025-10-10 14:06:02 -07:00
hugetlbfs hugetlbfs: move lock assertions after early returns in huge_pmd_unshare() 2025-10-21 15:46:17 -07:00
iomap iomap: account for unaligned end offsets when truncating read range 2026-01-02 12:56:38 +01:00
isofs isofs: check the return value of sb_min_blocksize() in isofs_fill_super 2025-11-05 14:00:16 +01:00
jbd2 jbd2: use a weaker annotation in journal handling 2026-01-02 12:57:10 +01:00
jffs2 mm: introduce memdesc_flags_t 2025-09-13 16:55:07 -07:00
jfs A few fixes and cleanups for JFS. 2025-10-03 13:54:23 -07:00
kernfs vfs-6.18-rc1.misc 2025-09-29 09:03:07 -07:00
lockd lockd: fix vfs_test_lock() calls 2026-01-08 10:17:10 +01:00
minix minixfs: Verify inode mode when loading from disk 2025-08-19 13:30:46 +02:00
netfs netfs: Fix early read unlock of page with EOF in middle 2026-01-17 16:35:19 +01:00
nfs NFS: Fix size read races in truncate, fallocate and copy offload 2026-01-23 11:21:20 +01:00
nfs_common NFSD: Remove NFSERR_EAGAIN 2026-01-17 16:35:10 +01:00
nfsd NFSD: Remove NFSERR_EAGAIN 2026-01-17 16:35:10 +01:00
nilfs2 nilfs2: avoid having an active sc_timer before freeing sci 2025-11-09 21:19:46 -08:00
nls fs/nls: Fix inconsistency between utf8_to_utf32() and utf32_to_utf8() 2025-12-18 14:03:35 +01:00
notify fsnotify: do not generate ACCESS/MODIFY events on child for special files 2026-01-02 12:57:23 +01:00
ntfs3 ntfs: Do not overwrite uptodate pages 2026-01-08 10:16:52 +01:00
ocfs2 ocfs2: fix kernel BUG in ocfs2_find_victim_chain 2026-01-02 12:57:19 +01:00
omfs vfs-6.17-rc1.mmap_prepare 2025-07-28 13:43:25 -07:00
openpromfs
orangefs orangefs: Two cleanups and a bug fix. 2025-10-03 13:59:56 -07:00
overlayfs ovl: fail ovl_lock_rename_workdir() if either target is unhashed 2025-11-28 10:42:32 +01:00
proc fs/proc: fix uaf in proc_readdir_de() 2025-11-09 21:19:43 -08:00
pstore pstore update for v6.18-rc1 2025-09-29 18:08:34 -07:00
qnx4
qnx6
quota fs: replace use of system_unbound_wq with system_dfl_wq 2025-09-19 16:15:07 +02:00
ramfs fs: rename generic_delete_inode() and generic_drop_inode() 2025-09-15 16:09:42 +02:00
resctrl x86,fs/resctrl: Fix NULL pointer dereference with events force-disabled in mbm_event mode 2025-10-20 18:06:31 +02:00
romfs fs: replace mmap hook with .mmap_prepare for simple mappings 2025-06-19 13:56:59 +02:00
smb smb/client: fix NT_STATUS_NO_DATA_DETECTED value 2026-01-17 16:35:17 +01:00
squashfs Patch series in this pull request: 2025-10-02 18:44:54 -07:00
sysfs sysfs: check visibility before changing group attribute ownership 2025-10-17 09:48:34 +02:00
tests
tracefs tracefs: fix a leak in eventfs_create_events_dir() 2025-12-18 14:03:02 +01:00
ubifs Summary of significant series in this pull request: 2025-10-02 18:18:33 -07:00
udf fs: udf: fix OOB read in lengthAllocDescs handling 2025-09-22 15:33:56 +02:00
ufs vfs-6.17-rc1.mmap_prepare 2025-07-28 13:43:25 -07:00
unicode
vboxsf simplify vboxsf_dir_atomic_open() 2025-09-16 23:59:38 -04:00
verity Optimize fsverity with 2-way interleaved hashing 2025-09-29 15:55:20 -07:00
xfs xfs: Fix the return value of xfs_rtcopy_summary() 2026-01-23 11:21:25 +01:00
zonefs zonefs: correct some spelling mistakes 2025-08-12 11:59:27 +09:00
aio.c Summary of significant series in this pull request: 2025-10-02 18:18:33 -07:00
anon_inodes.c module: Rename EXPORT_SYMBOL_GPL_FOR_MODULES to EXPORT_SYMBOL_FOR_MODULES 2025-08-11 16:16:36 +02:00
attr.c vfs: add ATTR_CTIME_SET flag 2025-09-21 19:24:50 -04:00
backing-file.c vfs-6.17-rc1.mmap_prepare 2025-07-28 13:43:25 -07:00
bad_inode.c
binfmt_elf_fdpic.c execve updates for v6.17 2025-07-28 17:11:40 -07:00
binfmt_elf.c binfmt_elf: preserve original ELF e_flags for core dumps 2025-09-03 20:49:32 -07:00
binfmt_flat.c
binfmt_misc.c binfmt_misc: restore write access before closing files opened by open_exec() 2025-11-05 14:00:16 +01:00
binfmt_script.c
bpf_fs_kfuncs.c bpf...d_path(): constify path argument 2025-09-15 21:17:08 -04:00
buffer.c fs/buffer: fix use-after-free when call bh_read() helper 2025-08-19 13:51:28 +02:00
char_dev.c
compat_binfmt_elf.c
coredump.c coredump: fix core_pattern input validation 2025-10-07 13:12:46 +02:00
d_path.c fold fs_struct->{lock,seq} into a seqlock 2025-07-08 10:25:19 +02:00
dax.c dax: skip read lock assertion for read-only filesystems 2025-10-07 12:48:33 +02:00
dcache.c vfs: Don't leak disconnected dentries on umount 2025-10-07 13:09:08 +02:00
direct-io.c Summary of significant series in this pull request: 2025-07-31 14:57:54 -07:00
drop_caches.c
eventfd.c
eventpoll.c eventpoll: Replace rwlock with spinlock 2025-09-05 15:51:24 +02:00
exec.c coredump: fix core_pattern input validation 2025-10-07 13:12:46 +02:00
fcntl.c fcntl: trim arguments 2025-09-26 10:21:23 +02:00
fhandle.c namespace-6.18-rc1 2025-09-29 11:20:29 -07:00
file_attr.c fs: return EOPNOTSUPP from file_setattr/file_getattr syscalls 2025-10-10 13:46:00 +02:00
file_table.c fs: update comment in init_file() 2025-10-07 12:48:33 +02:00
file.c fs: always return zero on success from replace_fd() 2025-08-11 14:52:25 +02:00
filesystems.c
fs_context.c change the calling conventions for vfs_parse_fs_string() 2025-09-04 15:20:51 -04:00
fs_parser.c
fs_pin.c
fs_struct.c fold fs_struct->{lock,seq} into a seqlock 2025-07-08 10:25:19 +02:00
fs_types.c
fs-writeback.c vfs-6.18-rc1.writeback 2025-09-29 11:34:40 -07:00
fsopen.c fscontext: do not consume log entries when returning -EMSGSIZE 2025-08-11 14:52:41 +02:00
init.c VFS: rename kern_path_locked() and related functions. 2025-09-23 12:37:36 +02:00
inode.c fs: lift the FMODE_NOCMTIME check into file_update_time_flags 2025-12-18 14:03:21 +01:00
internal.h file->f_path constification 2025-10-03 16:32:36 -07:00
ioctl.c fs: remove vfs_ioctl export 2025-09-01 13:08:01 +02:00
Kconfig Summary of significant series in this pull request: 2025-10-02 18:18:33 -07:00
Kconfig.binfmt binfmt_elf: preserve original ELF e_flags for core dumps 2025-09-03 20:49:32 -07:00
kernel_read_file.c
libfs.c shmem: fix recovery on rename failures 2026-01-02 12:56:37 +01:00
locks.c lockd: fix vfs_test_lock() calls 2026-01-08 10:17:10 +01:00
Makefile Remove bcachefs core code 2025-09-29 13:43:52 -07:00
mbcache.c
mnt_idmapping.c
mount.h mount-related stuff for this cycle 2025-10-03 10:19:44 -07:00
mpage.c mpage: convert do_mpage_readpage() to return void type 2025-09-21 14:22:16 -07:00
namei.c file->f_path constification 2025-10-03 16:32:36 -07:00
namespace.c fs/namespace: fix reference leak in grab_requested_mnt_ns 2025-11-25 09:34:56 +01:00
nsfs.c nsfs: handle inode number mismatches gracefully in file handles 2025-10-07 12:48:33 +02:00
open.c file->f_path constification 2025-10-03 16:32:36 -07:00
pidfs.c pidfs: add missing BUILD_BUG_ON() assert on struct pidfd_info 2025-12-18 14:02:44 +01:00
pipe.c Add RWF_NOSIGNAL flag for pwritev2 2025-08-29 15:08:07 +02:00
pnode.c umount_tree(): take all victims out of propagation graph at once 2025-09-15 21:26:44 -04:00
pnode.h umount_tree(): take all victims out of propagation graph at once 2025-09-15 21:26:44 -04:00
posix_acl.c
proc_namespace.c ->mnt_devname is never NULL 2025-05-23 14:20:44 +02:00
read_write.c copy_file_range: limit size if in compat mode 2025-08-15 16:11:47 +02:00
readdir.c readdir: supply dir_context.count as readdir buffer size hint 2025-05-29 12:31:23 +02:00
remap_range.c
select.c fs: annotate suspected data race between poll_schedule_timeout() and pollwake() 2025-06-23 12:36:51 +02:00
seq_file.c
signalfd.c
splice.c netfs: Fix unbuffered write error handling 2025-08-15 15:56:49 +02:00
stack.c docs/vfs: update references to i_mutex to i_rwsem 2025-06-23 12:17:33 +02:00
stat.c constify path argument of vfs_statx_path() 2025-09-15 21:17:07 -04:00
statfs.c
super.c fs: PM: Fix reverse check in filesystems_freeze_callback() 2026-01-02 12:57:09 +01:00
sync.c
sysctls.c
timerfd.c
userfaultfd.c mm/mremap: use an explicit uffd failure path for mremap 2025-07-24 19:12:29 -07:00
utimes.c
xattr.c vfs-6.17-rc1.misc 2025-07-28 11:22:56 -07:00