Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2026-23038

pnfs/flexfiles: Fix memory leak in nfs4_ff_alloc_deviceid_node()

Description

In the Linux kernel, the following vulnerability has been resolved: pnfs/flexfiles: Fix memory leak in nfs4_ff_alloc_deviceid_node() In nfs4_ff_alloc_deviceid_node(), if the allocation for ds_versions fails, the function jumps to the out_scratch label without freeing the already allocated dsaddrs list, leading to a memory leak. Fix this by jumping to the out_err_drain_dsaddrs label, which properly frees the dsaddrs list before cleaning up other resources.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • d67ae825a59d639e4d8b82413af84d854617a87e to < e2dde5dafb80f1af4028ed10ad255f42af71c784affected
  • d67ae825a59d639e4d8b82413af84d854617a87e to < 27c90d8ed81e7a289c9fe41b5e31d8bb609a3385affected
  • d67ae825a59d639e4d8b82413af84d854617a87e to < 34b9dd179818ff7af2b36410985fd8166573c62daffected
  • d67ae825a59d639e4d8b82413af84d854617a87e to < 869862056e100973e76ce9f5f1b01837771b7722affected
  • d67ae825a59d639e4d8b82413af84d854617a87e to < 86da7efd12295a7e2b4abde5e5984c821edd938faffected
  • d67ae825a59d639e4d8b82413af84d854617a87e to < ed5d3f2f6885eb99f729e6ffd946e3aa058bd3ebaffected
  • d67ae825a59d639e4d8b82413af84d854617a87e to < 0c728083654f0066f5e10a1d2b0bd0907af19a58affected

Linux Linux

Default version status: affected

  • 4.0affected
  • 0 to < 4.0unaffected
  • 5.10.249 to ≤ 5.10.*unaffected
  • 5.15.199 to ≤ 5.15.*unaffected
  • 6.1.162 to ≤ 6.1.*unaffected
  • 6.6.122 to ≤ 6.6.*unaffected
  • 6.12.67 to ≤ 6.12.*unaffected
  • 6.18.7 to ≤ 6.18.*unaffected
  • 6.19 to ≤ *unaffected

References