CVE-2026-23038
Linux Kernel - Memory Leak in nfs4_ff_alloc_deviceid_node()
Title source: llmDescription
In the Linux kernel, the following vulnerability has been resolved: pnfs/flexfiles: Fix memory leak in nfs4_ff_alloc_deviceid_node() In nfs4_ff_alloc_deviceid_node(), if the allocation for ds_versions fails, the function jumps to the out_scratch label without freeing the already allocated dsaddrs list, leading to a memory leak. Fix this by jumping to the out_err_drain_dsaddrs label, which properly frees the dsaddrs list before cleaning up other resources.
References (7)
Core 7
Core References
Scores
EPSS
0.0002
EPSS Percentile
5.9%
Details
Status
published
Products (22)
linux/Kernel
4.0.0 - 5.10.249linux
linux/Kernel
5.11.0 - 5.15.199linux
linux/Kernel
5.16.0 - 6.1.162linux
linux/Kernel
6.13.0 - 6.18.7linux
linux/Kernel
6.2.0 - 6.6.122linux
linux/Kernel
6.7.0 - 6.12.67linux
Linux/Linux
< 4.0
Linux/Linux
4.0
Linux/Linux
5.10.249 - 5.10.*
Linux/Linux
5.15.199 - 5.15.*
... and 12 more
Published
Jan 31, 2026
Tracked Since
Feb 18, 2026