CVE Database
/

CVE-2026-23038

Back to search

CVE-2026-23038

Published: Jan 31, 2026

Modified: Jun 2, 2026

PUBLISHED

Description

In the Linux kernel, the following vulnerability has been resolved: pnfs/flexfiles: Fix memory leak in nfs4_ff_alloc_deviceid_node() In nfs4_ff_alloc_deviceid_node(), if the allocation for ds_versions fails, the function jumps to the out_scratch label without freeing the already allocated dsaddrs list, leading to a memory leak. Fix this by jumping to the out_err_drain_dsaddrs label, which properly frees the dsaddrs list before cleaning up other resources.

VendorProductVersions

Linux

Linux

affected
d67ae825a59d639e4d8b82413af84d854617a87e - < e2dde5dafb80f1af4028ed10ad255f42af71c784
affected
d67ae825a59d639e4d8b82413af84d854617a87e - < 27c90d8ed81e7a289c9fe41b5e31d8bb609a3385
affected
d67ae825a59d639e4d8b82413af84d854617a87e - < 34b9dd179818ff7af2b36410985fd8166573c62d
affected
d67ae825a59d639e4d8b82413af84d854617a87e - < 869862056e100973e76ce9f5f1b01837771b7722
affected
d67ae825a59d639e4d8b82413af84d854617a87e - < 86da7efd12295a7e2b4abde5e5984c821edd938f

+2 more versions

Linux

Linux

affected
4.0
unaffected
0 - < 4.0
unaffected
5.10.249 - <= 5.10.*
unaffected
5.15.199 - <= 5.15.*
unaffected
6.1.162 - <= 6.1.*

+4 more versions

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now