CVE-2026-23038: pnfs/flexfiles: Fix memory leak in nfs4_ff_alloc_deviceid_node()
In the Linux kernel, the following vulnerability has been resolved:
pnfs/flexfiles: Fix memory leak in nfs4ffallocdeviceidnode()
In nfs4ffallocdeviceidnode(), if the allocation for dsversions fails, the function jumps to the outscratch label without freeing the already allocated dsaddrs list, leading to a memory leak.
Fix this by jumping to the outerrdraindsaddrs label, which properly frees the dsaddrs list before cleaning up other resources.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-23038?
The severity of CVE-2026-23038 is classified as moderate due to the potential for a memory leak affecting system resources.
How do I fix CVE-2026-23038?
To fix CVE-2026-23038, you should apply the latest updated kernel from your Linux distribution that addresses this memory leak vulnerability.
What systems are affected by CVE-2026-23038?
CVE-2026-23038 affects specific versions of the Linux Kernel that utilize pnfs/flexfiles features.
What consequence does CVE-2026-23038 have if left unpatched?
If left unpatched, CVE-2026-23038 can lead to increased memory consumption, potentially resulting in system instability or denial of service.
How was CVE-2026-23038 discovered?
CVE-2026-23038 was discovered through code analysis of the Linux Kernel, specifically within the nfs4_ff_alloc_deviceid_node() function.