CVE-2026-72219

lockd: Plug nlm_file leak when nlm_do_fopen() fails

State: Published
Severity: Not scored
Published: Aug 15, 2026
Updated: Aug 17, 2026
Reserved: Aug 9, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

lockd: Plug nlm_file leak when nlm_do_fopen() fails

A client can repeatedly drive nlm_do_fopen() failures by presenting file handles that the underlying export rejects. After kzalloc_obj() succeeds in nlm_lookup_file(), the freshly allocated nlm_file is not yet inserted into nlm_files[]. The nlm_do_fopen() failure path jumps to out_unlock, which releases nlm_file_mutex and returns without freeing the allocation, so each failure leaks one nlm_file.

Route the failure through out_free so kfree() runs before the function returns.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	e580323ac0b51ad10ec2e181d1f777479b7983e7 to before bca74fff138429f3d5802865f38fc883d53a4f1aAffected 7f024fcd5c97dc70bb9121c80407cf3cf9be7159 to before d7c677feb3aa1f42b1026d75a8ea61338b51e4fbAffected 7f024fcd5c97dc70bb9121c80407cf3cf9be7159 to before 39f59bf67231ed2eb0cdf6337194360e964b609aAffected 7f024fcd5c97dc70bb9121c80407cf3cf9be7159 to before ddfbd816273b4e9c9b836f5b8773664c6f40f807Affected 7f024fcd5c97dc70bb9121c80407cf3cf9be7159 to before 1403f1221a35a6caf959bb7bf005741f17263c66Affected 7f024fcd5c97dc70bb9121c80407cf3cf9be7159 to before 1161c4b5bd0048c8148e919f818a33cff3623ef0Affected 7f024fcd5c97dc70bb9121c80407cf3cf9be7159 to before 3f2dc01b9cb516d4727a3b9263ee58c71ca00ba9Affected 7f024fcd5c97dc70bb9121c80407cf3cf9be7159 to before f16a1513452edb532fec81e591c64c320866719cAffected 5.10.220 to before 5.10.261Affected
LinuxLinux	5.15Affected before 5.15Not affected 5.10.261 through 5.10.Not affected 5.15.212 through 5.15.Not affected 6.1.178 through 6.1.Not affected 6.6.145 through 6.6.Not affected 6.12.97 through 6.12.Not affected 6.18.40 through 6.18.Not affected 7.1.5 through 7.1.*Not affected 7.2 and laterNot affected

Product

Versions

LinuxLinux

e580323ac0b51ad10ec2e181d1f777479b7983e7 to before bca74fff138429f3d5802865f38fc883d53a4f1aAffected
7f024fcd5c97dc70bb9121c80407cf3cf9be7159 to before d7c677feb3aa1f42b1026d75a8ea61338b51e4fbAffected
7f024fcd5c97dc70bb9121c80407cf3cf9be7159 to before 39f59bf67231ed2eb0cdf6337194360e964b609aAffected
7f024fcd5c97dc70bb9121c80407cf3cf9be7159 to before ddfbd816273b4e9c9b836f5b8773664c6f40f807Affected
7f024fcd5c97dc70bb9121c80407cf3cf9be7159 to before 1403f1221a35a6caf959bb7bf005741f17263c66Affected
7f024fcd5c97dc70bb9121c80407cf3cf9be7159 to before 1161c4b5bd0048c8148e919f818a33cff3623ef0Affected
7f024fcd5c97dc70bb9121c80407cf3cf9be7159 to before 3f2dc01b9cb516d4727a3b9263ee58c71ca00ba9Affected
7f024fcd5c97dc70bb9121c80407cf3cf9be7159 to before f16a1513452edb532fec81e591c64c320866719cAffected
5.10.220 to before 5.10.261Affected

LinuxLinux

5.15Affected
before 5.15Not affected
5.10.261 through 5.10.*Not affected
5.15.212 through 5.15.*Not affected
6.1.178 through 6.1.*Not affected
6.6.145 through 6.6.*Not affected
6.12.97 through 6.12.*Not affected
6.18.40 through 6.18.*Not affected
7.1.5 through 7.1.*Not affected
7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.