CVE-2026-46046

The CVE pertains to the Linux kernel ext4 subsystem. In ext4_xattr_inode_dec_ref_all(), the code obtains iloc via ext4_get_inode_loc() but fails to release it with brelse(), causing a refcount leak when block_csum is false. The root cause was introduced by commit c8e008b60492 (ext4: ignore xattrs...