Home

Description

In the Linux kernel, the following vulnerability has been resolved: pnfs/flexfiles: Fix memory leak in nfs4_ff_alloc_deviceid_node() In nfs4_ff_alloc_deviceid_node(), if the allocation for ds_versions fails, the function jumps to the out_scratch label without freeing the already allocated dsaddrs list, leading to a memory leak. Fix this by jumping to the out_err_drain_dsaddrs label, which properly frees the dsaddrs list before cleaning up other resources.

PUBLISHED Reserved 2026-01-13 | Published 2026-01-31 | Updated 2026-01-31 | Assigner Linux

Product status

Default status
unaffected

d67ae825a59d639e4d8b82413af84d854617a87e (git) before 869862056e100973e76ce9f5f1b01837771b7722
affected

d67ae825a59d639e4d8b82413af84d854617a87e (git) before 86da7efd12295a7e2b4abde5e5984c821edd938f
affected

d67ae825a59d639e4d8b82413af84d854617a87e (git) before ed5d3f2f6885eb99f729e6ffd946e3aa058bd3eb
affected

d67ae825a59d639e4d8b82413af84d854617a87e (git) before 0c728083654f0066f5e10a1d2b0bd0907af19a58
affected

Default status
affected

4.0
affected

Any version before 4.0
unaffected

6.6.122 (semver)
unaffected

6.12.67 (semver)
unaffected

6.18.7 (semver)
unaffected

6.19-rc6 (original_commit_for_fix)
unaffected

References

git.kernel.org/...c/869862056e100973e76ce9f5f1b01837771b7722

git.kernel.org/...c/86da7efd12295a7e2b4abde5e5984c821edd938f

git.kernel.org/...c/ed5d3f2f6885eb99f729e6ffd946e3aa058bd3eb

git.kernel.org/...c/0c728083654f0066f5e10a1d2b0bd0907af19a58

cve.org (CVE-2026-23038)

nvd.nist.gov (CVE-2026-23038)

Download JSON