CVE-2026-64509: rust: block: fix GenDisk cleanup paths
In the Linux kernel, the following vulnerability has been resolved:
rust: block: fix GenDisk cleanup paths
GenDiskBuilder::build() still has fallible work after blkmqallocdisk(), but its error path only recovers the foreign queue data. That leaks the temporary gendisk and requestqueue until later teardown. If the caller moved the last Arc<TagSet<T>> into build(), the leaked queue can retain blk-mq state after the tag set is dropped.
Fix the pre-registration failure path by dropping the temporary gendisk reference with putdisk() before recovering queuedata, so diskrelease() can tear down the owned queue.
Also pair GenDisk::drop() with putdisk() after delgendisk(). Once a Rust GenDisk has been added with deviceadddisk(), delgendisk() only unregisters it; the final gendisk reference still has to be dropped to complete the release path.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-64509?
CVE-2026-64509 has a risk score of 34, indicating it has a moderate severity level.
How do I fix CVE-2026-64509?
To fix CVE-2026-64509, ensure you are running the latest version of the Linux kernel where this vulnerability has been resolved.
What is the potential impact of CVE-2026-64509?
The potential impact of CVE-2026-64509 includes memory leaks that could lead to resource exhaustion on affected systems.
Is CVE-2026-64509 applicable to all versions of the Linux kernel?
CVE-2026-64509 is related specifically to the Linux kernel version within the context described and may not affect all versions.
When was CVE-2026-64509 published?
CVE-2026-64509 was published on July 25, 2026.