Skip to main content
cve.nowby Sazabi
← All vulnerabilities
CVE-2026-23038

pnfs/flexfiles: Fix memory leak in nfs4_ff_alloc_deviceid_node()

Published
Last modified
published
Not listed in CISA KEV
Fix
Fixed in 5.10.249, 5.15.199, 6.1.162, 6.6.122, 6.12.67, and 1 more
None on Exploit-DB, Metasploit or GitHub
  • Exploitation: none
  • Automatable: no
  • Technical impact: partial

Summary

In the Linux kernel, the following vulnerability has been resolved: pnfs/flexfiles: Fix memory leak in nfs4_ff_alloc_deviceid_node() In nfs4_ff_alloc_deviceid_node(), if the allocation for ds_versions fails, the function jumps to the out_scratch label without freeing the already allocated dsaddrs list, leading to a memory leak. Fix this by jumping to the out_err_drain_dsaddrs label, which properly frees the dsaddrs list before cleaning up other resources.

Timeline

  1. CVE published
  2. CISA SSVC assessment

    Exploitation: none · Automatable: no · Technical impact: partial

  3. Record last updated

Affected versions

  • Linux Linux

    From d67ae825a59d639e4d8b82413af84d854617a87e · fixed in e2dde5dafb80f1af4028ed10ad255f42af71c784; From d67ae825a59d639e4d8b82413af84d854617a87e · fixed in 27c90d8ed81e7a289c9fe41b5e31d8bb609a3385; From d67ae825a59d639e4d8b82413af84d854617a87e · fixed in 34b9dd179818ff7af2b36410985fd8166573c62d; From d67ae825a59d639e4d8b82413af84d854617a87e · fixed in 869862056e100973e76ce9f5f1b01837771b7722; From d67ae825a59d639e4d8b82413af84d854617a87e · fixed in 86da7efd12295a7e2b4abde5e5984c821edd938f; From d67ae825a59d639e4d8b82413af84d854617a87e · fixed in ed5d3f2f6885eb99f729e6ffd946e3aa058bd3eb; From d67ae825a59d639e4d8b82413af84d854617a87e · fixed in 0c728083654f0066f5e10a1d2b0bd0907af19a58

  • Linux Linux

    4.0

  • KernelLinux

    From 4.0.0 · fixed in 5.10.249; From 5.11.0 · fixed in 5.15.199; From 5.16.0 · fixed in 6.1.162; From 6.2.0 · fixed in 6.6.122; From 6.7.0 · fixed in 6.12.67; From 6.13.0 · fixed in 6.18.7

References 7

git.kernel.org