CVE-2026-46046, published by NVD on May 27, 2026 from kernel.org, is a Linux kernel ext4 vulnerability in which a missing brelse() call in ext4_xattr_inode_dec_ref_all() can leak a buffer-head reference after an earlier extended-attribute hardening change. The bug is small enough to fit in a...