Skip to main content

In the Linux kernel, the following vulnerability has been resolved: xfs: release orphanage dir inode if chown fails LOLLM points out that we leak… (CVE-2026-98448)

0
Medium
Published: 10/18/2026 (10/18/2026, 18:31:49 UTC)
Source: GCVE Database

Description

A vulnerability in the Linux kernel's XFS filesystem was resolved involving a resource leak when changing ownership (chown) of the orphanage directory inode fails. The issue caused the kernel to leak a grabbed reference to the orphanage directory inode, potentially leading to resource management problems.

AI-Powered Analysis

Machine-generated threat intelligence

AILast updated: 10/18/2026, 19:49:05 UTC

Technical Analysis

The Linux kernel's XFS filesystem had a vulnerability where if the chown operation on the orphanage directory inode failed, the kernel leaked the igrab'd reference to that inode. This leak could cause resource mismanagement. The vulnerability has been fixed by ensuring the orphanage directory inode is properly released if chown fails.

Potential Impact

The vulnerability results in a resource leak within the kernel's XFS filesystem code when chown fails on the orphanage directory inode. While this does not directly indicate privilege escalation or code execution, resource leaks can degrade system stability or lead to denial of service conditions over time.

Mitigation Recommendations

A fix for this vulnerability has been implemented in the Linux kernel. Users should apply the official kernel updates that include this patch to resolve the issue. No additional mitigation steps are indicated.

Pro Console: star threats, build custom feeds, automate alerts via Slack, email & webhooks.Upgrade to Pro

Technical Details

Gcve Source
db.gcve.eu
Osv Id
GHSA-wpv5-8rhc-4mcx
Osv Schema Version
1.4.0
Aliases
["CVE-2026-98448"]

Threat ID: 6ad520b12cdf04f6569944e6

Added to database: 10/18/2026, 19:40:33 UTC

Last enriched: 10/18/2026, 19:49:05 UTC

Last updated: 10/18/2026, 22:02:57 UTC

Views: 4

Community Reviews

0 reviews

Crowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.

Sort by
Loading community insights…

Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.

Actions

PRO

Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.

Please log in to the Console to use AI analysis features.

Need more coverage?

Upgrade to Pro Console for AI refresh and higher limits.

For incident response and remediation, OffSeq services can help resolve threats faster.

Latest Threats

Breach by OffSeqOFFSEQFRIENDS — 25% OFF

Check if your credentials are on the dark web

Instant breach scanning across billions of leaked records. Free tier available.

Scan now
OffSeq TrainingCredly Certified

Lead Pen Test Professional

Technical5-day eLearningPECB Accredited
View courses