CVE-2026-89576

dm-era: fix shadowed superblock leak on take-snap failure

State: Published
Severity: Not scored
Published: Sep 11, 2026
Updated: Oct 19, 2026
Reserved: Sep 11, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

dm-era: fix shadowed superblock leak on take-snap failure

metadata_take_snap() bumps the live superblock refcount and then dm_tm_shadow_block() allocates a new block for the metadata snapshot. If the subsequent dm_sm_inc_block() of writeset_tree_root or era_array_root fails, the function only unlocks the clone and returns. The newly allocated shadow block is never returned to the metadata space map, so each failed take-snap permanently leaks one metadata block.

Free the clone with dm_sm_dec_block() on those error paths, matching the final step of metadata_drop_snap().

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	eec40579d84873dfb7021eb24c50360f073237c5 to before 54dd21ca945ecc07885012b9f3e8197f091cfba0Affected eec40579d84873dfb7021eb24c50360f073237c5 to before ef00efb6fcaee88f50891279ceced17c614e97f7Affected eec40579d84873dfb7021eb24c50360f073237c5 to before e9fa68b89214bc65af0ef963af7ec3cce9f866e0Affected eec40579d84873dfb7021eb24c50360f073237c5 to before dc731d7fddfd6149f5e88ea080475d18c36d3c64Affected eec40579d84873dfb7021eb24c50360f073237c5 to before d66ceeefb87ddb097b0546bafc581380b816b048Affected eec40579d84873dfb7021eb24c50360f073237c5 to before 36ff918637e3517f732188a3c39dbeae5b9cfb1bAffected eec40579d84873dfb7021eb24c50360f073237c5 to before 6876ca330e741fb8886d12070cb6a7f9cb67257eAffected eec40579d84873dfb7021eb24c50360f073237c5 to before 39c5aa3bd8ec3912d2cd0b3fe092642b0d2b0713Affected
LinuxLinux	3.15Affected before 3.15Not affected 5.10.270 through 5.10.Not affected 5.15.221 through 5.15.Not affected 6.1.188 through 6.1.Not affected 6.6.157 through 6.6.Not affected 6.12.109 through 6.12.Not affected 6.18.50 through 6.18.Not affected 7.2.4 through 7.2.*Not affected 7.3 and laterNot affected

Product

Versions

LinuxLinux

eec40579d84873dfb7021eb24c50360f073237c5 to before 54dd21ca945ecc07885012b9f3e8197f091cfba0Affected
eec40579d84873dfb7021eb24c50360f073237c5 to before ef00efb6fcaee88f50891279ceced17c614e97f7Affected
eec40579d84873dfb7021eb24c50360f073237c5 to before e9fa68b89214bc65af0ef963af7ec3cce9f866e0Affected
eec40579d84873dfb7021eb24c50360f073237c5 to before dc731d7fddfd6149f5e88ea080475d18c36d3c64Affected
eec40579d84873dfb7021eb24c50360f073237c5 to before d66ceeefb87ddb097b0546bafc581380b816b048Affected
eec40579d84873dfb7021eb24c50360f073237c5 to before 36ff918637e3517f732188a3c39dbeae5b9cfb1bAffected
eec40579d84873dfb7021eb24c50360f073237c5 to before 6876ca330e741fb8886d12070cb6a7f9cb67257eAffected
eec40579d84873dfb7021eb24c50360f073237c5 to before 39c5aa3bd8ec3912d2cd0b3fe092642b0d2b0713Affected

LinuxLinux

3.15Affected
before 3.15Not affected
5.10.270 through 5.10.*Not affected
5.15.221 through 5.15.*Not affected
6.1.188 through 6.1.*Not affected
6.6.157 through 6.6.*Not affected
6.12.109 through 6.12.*Not affected
6.18.50 through 6.18.*Not affected
7.2.4 through 7.2.*Not affected
7.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.