CVE-2026-72015: fs/resctrl: Fix double-add of pseudo-locked region's RMID to free list
In the Linux kernel, the following vulnerability has been resolved:
fs/resctrl: Fix double-add of pseudo-locked region's RMID to free list
A pseudo-locked group's RMID is freed when it is created. On unmount rmdirallsub() unconditionally frees all RMID of all groups, resulting in a double-free of the pseudo-locked group's RMID. The consequence of this is that the original free results in the pseudo-locked group's RMID being added to the rmidfreelru linked list and the second free then attempts to add the same RMID entry to the rmidfreelru again.
Do not double-free a pseudo-locked group's RMID.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-72015?
The severity of CVE-2026-72015 is rated at 34, indicating a moderate risk level.
How do I fix CVE-2026-72015?
To fix CVE-2026-72015, ensure that you update to the patched version of the Linux kernel that addresses the vulnerability.
What systems are affected by CVE-2026-72015?
CVE-2026-72015 affects specific versions of the Linux kernel that utilize pseudo-locked regions.
What are the potential impacts of CVE-2026-72015?
The potential impact of CVE-2026-72015 includes system instability due to double-free errors affecting resource management.
When was CVE-2026-72015 published?
CVE-2026-72015 was published on August 15, 2026.