CVE-2026-53126

blk-cgroup: fix disk reference leak in blkcg_maybe_throttle_current()

State
Published
Severity
Not scored
Published
Jun 24, 2026
Updated
Jun 24, 2026
Reserved
Jun 9, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

blk-cgroup: fix disk reference leak in blkcg_maybe_throttle_current()

Add the missing put_disk() on the error path in blkcg_maybe_throttle_current(). When blkcg lookup, blkg lookup, or blkg_tryget() fails, the function jumps to the out label which only calls rcu_read_unlock() but does not release the disk reference acquired by blkcg_schedule_throttle() via get_device(). Since current->throttle_disk is already set to NULL before the lookup, blkcg_exit() cannot release this reference either, causing the disk to never be freed.

Restore the reference release that was present as blk_put_queue() in the original code but was inadvertently dropped during the conversion from request_queue to gendisk.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • f05837ed73d0c73e950b2d9f2612febb0d3d451e to before 4048ed98860d3785645ebbd34f69566a6c7320c3Affected
  • f05837ed73d0c73e950b2d9f2612febb0d3d451e to before 73a5af059905d171b398c8b2381632ee499948b5Affected
  • f05837ed73d0c73e950b2d9f2612febb0d3d451e to before b3e005f16cd98f815429a87aef4c61e9c140779fAffected
  • f05837ed73d0c73e950b2d9f2612febb0d3d451e to before 000e8454692cab9d1f1b80130e2870e355301d06Affected
  • f05837ed73d0c73e950b2d9f2612febb0d3d451e to before 23308af722fefed00af5f238024c11710938fba3Affected
LinuxLinux
  • 6.3Affected
  • before 6.3Not affected
  • 6.6.141 through 6.6.*Not affected
  • 6.12.91 through 6.12.*Not affected
  • 6.18.33 through 6.18.*Not affected
  • 7.0.10 through 7.0.*Not affected
  • 7.1 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.