{"id":"CVE-2026-98448","kind":"vulnerability","aliases":["CVE-2026-98448"],"related":[],"title":"Linux kernel XFS: failed orphanage chown leaks a directory inode reference","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nxfs: release orphanage dir inode if chown fails\n\nLOLLM points out that we leak the igrab'd reference to the orphanage\ndirectory inode if chowning it fails.  Fix that.","summary":"When changing ownership of the XFS orphanage directory fails, the kernel keeps an extra reference to that directory inode that is never released. The sources describe a reference leak and do not state a direct way for an attacker to run code or read data.","severity":"unknown","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["infrastructure","kernel","linux","xfs"],"not_affected_if":[],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-10-18T16:16:55+00:00","first_seen_at":"2026-10-23T21:57:15+00:00","triaged_at":"2026-10-25T05:27:25+00:00","updated_at":"2026-10-25T05:27:25+00:00","category":"infrastructure","confidence":0.4,"triage":{"at":"2026-10-25T05:27:25Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"local","title":"Linux kernel XFS: failed orphanage chown leaks a directory inode reference","impact":"low","summary":"When changing ownership of the XFS orphanage directory fails, the kernel keeps an extra reference to that directory inode that is never released. The sources describe a reference leak and do not state a direct way for an attacker to run code or read data.","category":"infrastructure","nicknames":[],"who_cares":["linux","xfs","kernel"],"confidence":0.4,"needs_auth":"unknown","worst_case":"unknown","analyst_note":"Find the fixed kernel versions and stable commits in the NVD entry or kernel.org stable list, and whether repair of XFS filesystems can trigger the failing chown path.","how_to_check":"unknown","needs_analyst":true,"not_affected_if":[],"who_is_affected":"unknown","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"low"},"cost_usd":0.000502,"input_tokens":3299,"output_tokens":344,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-2026':13A,16A '-98448':14A,17A 'attack':60B 'chang':23B 'chown':6A,83C,101C 'code':63B 'cve':12A,15A 'd':93C 'data':66B 'describ':47B 'dir':80C 'direct':56B 'directori':9A,29B,39B,98C 'extra':35B 'fail':4A,30B,84C,103C 'fix':104C 'follow':72C 'igrab':92C 'infrastructur':18B 'inod':10A,40B,81C,99C 'keep':33B 'kernel':2A,19B,32B,70C 'leak':7A,50B,90C 'linux':1A,20B,69C 'lollm':85C 'never':43B 'orphanag':5A,28B,79C,97C 'ownership':24B 'point':86C 'read':65B 'refer':11A,36B,49B,94C 'releas':44B,78C 'resolv':76C 'run':62B 'sourc':46B 'state':54B 'vulner':73C 'way':57B 'xfs':3A,21B,27B,77C","nicknames":[],"mitigations":[],"who_affected":null,"tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-18T16:16:55+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-98448","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-98448","severity":null,"published_at":"2026-10-18T16:16:55+00:00","modified_at":"2026-10-19T10:18:53+00:00","first_seen_at":"2026-10-23T21:57:15+00:00","fetched_at":"2026-10-23T22:28:56+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}