VULNERABILITY INTELLIGENCE

CVE-2026-23038

EPSS probability0.28%
CISA KEVNot currently listed
Published2026-01-31
Last modified2026-10-19

Description

In the Linux kernel, the following vulnerability has been resolved: pnfs/flexfiles: Fix memory leak in nfs4_ff_alloc_deviceid_node() In nfs4_ff_alloc_deviceid_node(), if the allocation for ds_versions fails, the function jumps to the out_scratch label without freeing the already allocated dsaddrs list, leading to a memory leak. Fix this by jumping to the out_err_drain_dsaddrs label, which properly frees the dsaddrs list before cleaning up other resources.

Weakness classification

  • 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-401

Primary references