{"affected":[{"defaultStatus":"unaffected","product":"Linux","source":"CNA: Linux","vendor":"Linux","versions":[{"lessThan":"f89df93e8aefa4c1c813f835559f2ac727f79766","status":"affected","version":"24213fa46c7080c31d79aa2e3e2f0d9480cab700","versionType":"git"},{"lessThan":"3f586b4c92e4272fcd01bf0db0590b63acf3e85b","status":"affected","version":"24213fa46c7080c31d79aa2e3e2f0d9480cab700","versionType":"git"},{"lessThan":"b3d39b03799600c76c33486e2d29b73a771023db","status":"affected","version":"24213fa46c7080c31d79aa2e3e2f0d9480cab700","versionType":"git"},{"lessThan":"72f673d1c1deb819554d3e7e154f6d84301eb735","status":"affected","version":"24213fa46c7080c31d79aa2e3e2f0d9480cab700","versionType":"git"},{"lessThan":"60a23d4ea169e27403f3bb023bb98036797c0206","status":"affected","version":"24213fa46c7080c31d79aa2e3e2f0d9480cab700","versionType":"git"},{"lessThan":"7591d1727067d6063247901ad25c4bdc4e5695c4","status":"affected","version":"24213fa46c7080c31d79aa2e3e2f0d9480cab700","versionType":"git"},{"lessThan":"ce6050bafb4e33377dc17fcc357736bfc351180c","status":"affected","version":"24213fa46c7080c31d79aa2e3e2f0d9480cab700","versionType":"git"}]},{"defaultStatus":"affected","product":"Linux","source":"CNA: Linux","vendor":"Linux","versions":[{"status":"affected","version":"5.13"},{"lessThan":"5.13","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.216","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.183","versionType":"semver"},{"lessThanOrEqual":"6.6.*","status":"unaffected","version":"6.6.148","versionType":"semver"},{"lessThanOrEqual":"6.12.*","status":"unaffected","version":"6.12.101","versionType":"semver"},{"lessThanOrEqual":"6.18.*","status":"unaffected","version":"6.18.42","versionType":"semver"},{"lessThanOrEqual":"7.1.*","status":"unaffected","version":"7.1.6","versionType":"semver"},{"lessThanOrEqual":"*","status":"unaffected","version":"7.2","versionType":"original_commit_for_fix"}]}],"cveId":"CVE-2026-68422","cwes":[],"description":"In the Linux kernel, the following vulnerability has been resolved:\n\nbtrfs: fix root leak if its reloc root is unexpected in merge_reloc_roots()\n\nIf we have an unexpected reloc_root for our root, we jump to the out label\nbut never drop the reference we obtained for root, resulting in a leak.\nAdd a missing btrfs_put_root() call.","epss":{"date":"2026-11-06","percentile":0.11957,"score":0.00215},"exploits":[],"kev":null,"metrics":[],"modifiedAt":1793985572663,"publishedAt":1786363482949,"references":[{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/f89df93e8aefa4c1c813f835559f2ac727f79766"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/3f586b4c92e4272fcd01bf0db0590b63acf3e85b"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/b3d39b03799600c76c33486e2d29b73a771023db"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/72f673d1c1deb819554d3e7e154f6d84301eb735"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/60a23d4ea169e27403f3bb023bb98036797c0206"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/7591d1727067d6063247901ad25c4bdc4e5695c4"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/ce6050bafb4e33377dc17fcc357736bfc351180c"},{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":[],"url":"https://git.kernel.org/stable/c/3f586b4c92e4272fcd01bf0db0590b63acf3e85b"},{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":[],"url":"https://git.kernel.org/stable/c/60a23d4ea169e27403f3bb023bb98036797c0206"},{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":[],"url":"https://git.kernel.org/stable/c/72f673d1c1deb819554d3e7e154f6d84301eb735"},{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":[],"url":"https://git.kernel.org/stable/c/7591d1727067d6063247901ad25c4bdc4e5695c4"},{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":[],"url":"https://git.kernel.org/stable/c/b3d39b03799600c76c33486e2d29b73a771023db"},{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":[],"url":"https://git.kernel.org/stable/c/ce6050bafb4e33377dc17fcc357736bfc351180c"},{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":[],"url":"https://git.kernel.org/stable/c/f89df93e8aefa4c1c813f835559f2ac727f79766"}],"remediation":[],"revision":"f875ba2ea47d576fbcf67ee3746bf48c82f5781e3b034e29cf9dd2c5e4e20a05","sources":[{"modifiedAt":1793984116265,"name":"CNA: Linux","retrievedAt":1793985999368,"url":"https://www.cve.org/CVERecord?id=CVE-2026-68422"},{"modifiedAt":1793985572663,"name":"NVD","retrievedAt":1793989651019,"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-68422"},{"modifiedAt":null,"name":"FIRST EPSS","retrievedAt":1793986040119,"url":"https://api.first.org/data/v1/epss?cve=CVE-2026-68422"}],"ssvc":{"assessedAt":1793983750686,"automatable":"no","exploitation":"none","source":"ADP: CISA-ADP","technicalImpact":"partial"},"status":"published","title":"btrfs: fix root leak if its reloc root is unexpected in merge_reloc_roots()","updatedAt":1793989651019}