Sohei Koyama 097227f1ff ext4: fix missing brelse() in ext4_xattr_inode_dec_ref_all() ...

commit 77d0595193 upstream.

The commit c8e008b604 ("ext4: ignore xattrs past end")
introduced a refcount leak in when block_csum is false.

ext4_xattr_inode_dec_ref_all() calls ext4_get_inode_loc() to
get iloc.bh, but never releases it with brelse().

Fixes: c8e008b604 ("ext4: ignore xattrs past end")
Signed-off-by: Sohei Koyama <skoyama@ddn.com>
Reviewed-by: Andreas Dilger <adilger@dilger.ca>
Reviewed-by: Ritesh Harjani (IBM) <ritesh.list@gmail.com>
Cc: stable@vger.kernel.org
Reviewed-by: Zhang Yi <yi.zhang@huawei.com>
Reviewed-by: Baokun Li <libaokun@linux.alibaba.com>
Link: https://patch.msgid.link/20260406074830.8480-1-skoyama@ddn.com
Signed-off-by: Theodore Ts'o <tytso@mit.edu>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2026-05-07 06:09:39 +02:00

..

.kunitconfig

…

acl.c

…

acl.h

…

balloc.c

…

bitmap.c

…

block_validity.c

…

crypto.c

ext4: fix journal credit check when setting fscrypt context

2026-04-02 13:09:47 +02:00

dir.c

…

ext4_extents.h

…

ext4_jbd2.c

ext4: wait for ongoing I/O to complete before freeing blocks

2025-10-23 16:20:19 +02:00

ext4_jbd2.h

ext4: avoid journaling sb update on error if journal is destroying

2025-09-09 18:58:20 +02:00

ext4.h

ext4: fix use-after-free in update_super_work when racing with umount

2026-04-02 13:09:48 +02:00

extents_status.c

…

extents_status.h

…

extents.c

ext4: avoid infinite loops caused by residual data

2026-04-02 13:09:47 +02:00

fast_commit.c

ext4: publish jinode after initialization

2026-04-11 14:24:53 +02:00

fast_commit.h

…

file.c

ext4: fix checks for orphan inodes

2025-10-15 12:00:22 +02:00

fsmap.c

ext4: correctly handle queries for metadata mappings

2025-10-19 16:33:59 +02:00

fsmap.h

…

fsync.c

ext4: fix fsync(2) for nojournal mode

2026-04-02 13:09:47 +02:00

hash.c

…

ialloc.c

ext4: make recently_deleted() properly work with lazy itable initialization

2026-04-02 13:09:47 +02:00

indirect.c

ext4: add ext4_sb_bread_nofail() helper function for ext4_free_branches()

2025-10-19 16:33:59 +02:00

inline.c

ext4: replace BUG_ON with proper error handling in ext4_read_inline_folio

2026-04-02 13:09:47 +02:00

inode-test.c

…

inode.c

ext4: publish jinode after initialization

2026-04-11 14:24:53 +02:00

ioctl.c

ext4: mark group extend fast-commit ineligible

2026-03-04 07:21:14 -05:00

Kconfig

…

Makefile

…

mballoc-test.c

ext4: convert free groups order lists to xarrays

2026-03-13 17:20:25 +01:00

mballoc.c

ext4: always drain queued discard work in ext4_mb_release()

2026-04-02 13:09:48 +02:00

mballoc.h

ext4: refactor choose group to scan group

2026-03-13 17:20:25 +01:00

migrate.c

…

mmp.c

…

move_extent.c

ext4: correct the checking of quota files before moving extents

2025-12-18 13:54:54 +01:00

namei.c

ext4: introduce linear search for dentries

2025-09-19 16:35:42 +02:00

orphan.c

ext4: align max orphan file size with e2fsprogs limit

2026-01-08 10:14:15 +01:00

page-io.c

ext4: fix stale xarray tags after writeback

2026-04-02 13:09:47 +02:00

readpage.c

…

resize.c

…

super.c

ext4: fix the might_sleep() warnings in kvfree()

2026-04-02 13:09:48 +02:00

symlink.c

…

sysfs.c

ext4: fix use-after-free in update_super_work when racing with umount

2026-04-02 13:09:48 +02:00

truncate.h

…

verity.c

…

xattr_hurd.c

…

xattr_security.c

…

xattr_trusted.c

…

xattr_user.c

…

xattr.c

ext4: fix missing brelse() in ext4_xattr_inode_dec_ref_all()

2026-05-07 06:09:39 +02:00

xattr.h

ext4: fix out-of-bound read in ext4_xattr_inode_dec_ref_all()

2025-11-24 10:35:56 +01:00