Riskcovery

CVE-2026-97606

fs: autofs: fix memory leak in autofs_fill_super()

State
Published
Severity
Not scored
Published
Sep 25, 2026
Updated
Oct 19, 2026
Reserved
Sep 24, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

fs: autofs: fix memory leak in autofs_fill_super()

In autofs_fill_super(), we create a new inode using autofs_new_ino(), however, if we fail to create root_inode, (that is, root_inode failure path), we return -ENOMEM without freeing the new inode(ino) that we created causing a memory leak. Fix this by adding autofs_free_ino() to free the inode we created in root_inode failure path before returning ENOMEM.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 66917f85db6002ed09cd24186258892fcfca64b6 to before 4262b91e08e74cb5209ea737c554cf983d332382Affected
  • 66917f85db6002ed09cd24186258892fcfca64b6 to before 9933ad1c4ff67680cd59c47f6d2e81b533bcd467Affected
  • 66917f85db6002ed09cd24186258892fcfca64b6 to before 6259b5d9bdc45fdb3158406b28c27fa074823159Affected
  • 66917f85db6002ed09cd24186258892fcfca64b6 to before 5ab54837fce04a1c9923d0bfd3d5de51fdc768b3Affected
LinuxLinux
  • 6.7Affected
  • before 6.7Not affected
  • 6.12.111 through 6.12.*Not affected
  • 6.18.53 through 6.18.*Not affected
  • 7.2.7 through 7.2.*Not affected
  • 7.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.