-

CVE-2026-23038

pnfs/flexfiles: Fix memory leak in nfs4_ff_alloc_deviceid_node()

In the Linux kernel, the following vulnerability has been resolved:

pnfs/flexfiles: Fix memory leak in nfs4_ff_alloc_deviceid_node()

In nfs4_ff_alloc_deviceid_node(), if the allocation for ds_versions fails,
the function jumps to the out_scratch label without freeing the already
allocated dsaddrs list, leading to a memory leak.

Fix this by jumping to the out_err_drain_dsaddrs label, which properly
frees the dsaddrs list before cleaning up other resources.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version d67ae825a59d639e4d8b82413af84d854617a87e
Version < e2dde5dafb80f1af4028ed10ad255f42af71c784
Status affected
Version d67ae825a59d639e4d8b82413af84d854617a87e
Version < 27c90d8ed81e7a289c9fe41b5e31d8bb609a3385
Status affected
Version d67ae825a59d639e4d8b82413af84d854617a87e
Version < 34b9dd179818ff7af2b36410985fd8166573c62d
Status affected
Version d67ae825a59d639e4d8b82413af84d854617a87e
Version < 869862056e100973e76ce9f5f1b01837771b7722
Status affected
Version d67ae825a59d639e4d8b82413af84d854617a87e
Version < 86da7efd12295a7e2b4abde5e5984c821edd938f
Status affected
Version d67ae825a59d639e4d8b82413af84d854617a87e
Version < ed5d3f2f6885eb99f729e6ffd946e3aa058bd3eb
Status affected
Version d67ae825a59d639e4d8b82413af84d854617a87e
Version < 0c728083654f0066f5e10a1d2b0bd0907af19a58
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 4.0
Status affected
Version 0
Version < 4.0
Status unaffected
Version <= 5.10.*
Version 5.10.249
Status unaffected
Version <= 5.15.*
Version 5.15.199
Status unaffected
Version <= 6.1.*
Version 6.1.162
Status unaffected
Version <= 6.6.*
Version 6.6.122
Status unaffected
Version <= 6.12.*
Version 6.12.67
Status unaffected
Version <= 6.18.*
Version 6.18.7
Status unaffected
Version <= *
Version 6.19
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.02% 0.054
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Es wurden noch keine Informationen zu CWE veröffentlicht.