CVE-2026-23038

Linux Kernel - Memory Leak in nfs4_ff_alloc_deviceid_node()

Title source: llm
STIX 2.1

Description

In the Linux kernel, the following vulnerability has been resolved: pnfs/flexfiles: Fix memory leak in nfs4_ff_alloc_deviceid_node() In nfs4_ff_alloc_deviceid_node(), if the allocation for ds_versions fails, the function jumps to the out_scratch label without freeing the already allocated dsaddrs list, leading to a memory leak. Fix this by jumping to the out_err_drain_dsaddrs label, which properly frees the dsaddrs list before cleaning up other resources.

Scores

EPSS 0.0002
EPSS Percentile 5.9%

Details

Status published
Products (22)
linux/Kernel 4.0.0 - 5.10.249linux
linux/Kernel 5.11.0 - 5.15.199linux
linux/Kernel 5.16.0 - 6.1.162linux
linux/Kernel 6.13.0 - 6.18.7linux
linux/Kernel 6.2.0 - 6.6.122linux
linux/Kernel 6.7.0 - 6.12.67linux
Linux/Linux < 4.0
Linux/Linux 4.0
Linux/Linux 5.10.249 - 5.10.*
Linux/Linux 5.15.199 - 5.15.*
... and 12 more
Published Jan 31, 2026
Tracked Since Feb 18, 2026