CVE-2026-23038

pnfs/flexfiles: Fix memory leak in nfs4_ff_alloc_deviceid_node()

State: Published
Severity: Not scored
Published: Jan 31, 2026
Updated: Oct 19, 2026
Reserved: Jan 13, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

pnfs/flexfiles: Fix memory leak in nfs4_ff_alloc_deviceid_node()

In nfs4_ff_alloc_deviceid_node(), if the allocation for ds_versions fails, the function jumps to the out_scratch label without freeing the already allocated dsaddrs list, leading to a memory leak.

Fix this by jumping to the out_err_drain_dsaddrs label, which properly frees the dsaddrs list before cleaning up other resources.

Scores

The record has no CVSS score.

Weaknesses

CWE-401 Missing Release of Memory after Effective Lifetime

Affected Products

Product	Versions
LinuxLinux	d67ae825a59d639e4d8b82413af84d854617a87e to before e2dde5dafb80f1af4028ed10ad255f42af71c784Affected d67ae825a59d639e4d8b82413af84d854617a87e to before 27c90d8ed81e7a289c9fe41b5e31d8bb609a3385Affected d67ae825a59d639e4d8b82413af84d854617a87e to before 34b9dd179818ff7af2b36410985fd8166573c62dAffected d67ae825a59d639e4d8b82413af84d854617a87e to before 869862056e100973e76ce9f5f1b01837771b7722Affected d67ae825a59d639e4d8b82413af84d854617a87e to before 86da7efd12295a7e2b4abde5e5984c821edd938fAffected d67ae825a59d639e4d8b82413af84d854617a87e to before ed5d3f2f6885eb99f729e6ffd946e3aa058bd3ebAffected d67ae825a59d639e4d8b82413af84d854617a87e to before 0c728083654f0066f5e10a1d2b0bd0907af19a58Affected
LinuxLinux	4.0Affected before 4.0Not affected 5.10.249 through 5.10.Not affected 5.15.199 through 5.15.Not affected 6.1.162 through 6.1.Not affected 6.6.122 through 6.6.Not affected 6.12.67 through 6.12.Not affected 6.18.7 through 6.18.Not affected 6.19 and laterNot affected

Product

Versions

LinuxLinux

d67ae825a59d639e4d8b82413af84d854617a87e to before e2dde5dafb80f1af4028ed10ad255f42af71c784Affected
d67ae825a59d639e4d8b82413af84d854617a87e to before 27c90d8ed81e7a289c9fe41b5e31d8bb609a3385Affected
d67ae825a59d639e4d8b82413af84d854617a87e to before 34b9dd179818ff7af2b36410985fd8166573c62dAffected
d67ae825a59d639e4d8b82413af84d854617a87e to before 869862056e100973e76ce9f5f1b01837771b7722Affected
d67ae825a59d639e4d8b82413af84d854617a87e to before 86da7efd12295a7e2b4abde5e5984c821edd938fAffected
d67ae825a59d639e4d8b82413af84d854617a87e to before ed5d3f2f6885eb99f729e6ffd946e3aa058bd3ebAffected
d67ae825a59d639e4d8b82413af84d854617a87e to before 0c728083654f0066f5e10a1d2b0bd0907af19a58Affected

LinuxLinux

4.0Affected
before 4.0Not affected
5.10.249 through 5.10.*Not affected
5.15.199 through 5.15.*Not affected
6.1.162 through 6.1.*Not affected
6.6.122 through 6.6.*Not affected
6.12.67 through 6.12.*Not affected
6.18.7 through 6.18.*Not affected
6.19 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.