CVE-2026-72219
Description
In the Linux kernel, the following vulnerability has been resolved: lockd: Plug nlm_file leak when nlm_do_fopen() fails A client can repeatedly drive nlm_do_fopen() failures by presenting file handles that the underlying export rejects. After kzalloc_obj() succeeds in nlm_lookup_file(), the freshly allocated nlm_file is not yet inserted into nlm_files[]. The nlm_do_fopen() failure path jumps to out_unlock, which releases nlm_file_mutex and returns without freeing the allocation, so each failure leaks one nlm_file. Route the failure through out_free so kfree() runs before the function returns.
How to fix
- Linux Linuxbca74fff138429f3d5802865f38fc883d53a4f1a, d7c677feb3aa1f42b1026d75a8ea61338b51e4fb, 39f59bf67231ed2eb0cdf6337194360e964b609a, ddfbd816273b4e9c9b836f5b8773664c6f40f807, 1403f1221a35a6caf959bb7bf005741f17263c66, 1161c4b5bd0048c8148e919f818a33cff3623ef0, 3f2dc01b9cb516d4727a3b9263ee58c71ca00ba9, f16a1513452edb532fec81e591c64c320866719c, 5.10.261 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | e580323ac0b51ad10ec2e181d1f777479b7983e7 ≤ v < bca74fff138429f3d5802865f38fc883d53a4f1a, 7f024fcd5c97dc70bb9121c80407cf3cf9be7159 ≤ v < d7c677feb3aa1f42b1026d75a8ea61338b51e4fb, 7f024fcd5c97dc70bb9121c80407cf3cf9be7159 ≤ v < 39f59bf67231ed2eb0cdf6337194360e964b609a, 7f024fcd5c97dc70bb9121c80407cf3cf9be7159 ≤ v < ddfbd816273b4e9c9b836f5b8773664c6f40f807, 7f024fcd5c97dc70bb9121c80407cf3cf9be7159 ≤ v < 1403f1221a35a6caf959bb7bf005741f17263c66, 7f024fcd5c97dc70bb9121c80407cf3cf9be7159 ≤ v < 1161c4b5bd0048c8148e919f818a33cff3623ef0, 7f024fcd5c97dc70bb9121c80407cf3cf9be7159 ≤ v < 3f2dc01b9cb516d4727a3b9263ee58c71ca00ba9, 7f024fcd5c97dc70bb9121c80407cf3cf9be7159 ≤ v < f16a1513452edb532fec81e591c64c320866719c, 5.10.220 ≤ v < 5.10.261, 5.15 | bca74fff138429f3d5802865f38fc883d53a4f1a, d7c677feb3aa1f42b1026d75a8ea61338b51e4fb, 39f59bf67231ed2eb0cdf6337194360e964b609a, ddfbd816273b4e9c9b836f5b8773664c6f40f807, 1403f1221a35a6caf959bb7bf005741f17263c66, 1161c4b5bd0048c8148e919f818a33cff3623ef0, 3f2dc01b9cb516d4727a3b9263ee58c71ca00ba9, f16a1513452edb532fec81e591c64c320866719c, 5.10.261 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.