CVE-2026-90150pnfs/blocklayout: Fix device leaks on parse failure
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: pnfs/blocklayout: Fix device leaks on parse failure bl_parse_concat() and bl_parse_stripe() allocate a child device array and then parse each child in turn. If parsing a child fails, the failed child is not counted in nr_children and the parent may be left with a children array that bl_free_device() will not release when nr_children is zero. Release the failed child and the already parsed children before returning the error. Also make bl_free_device() release the child array whenever the children pointer is set, so that partially initialised concat or stripe devices are cleaned up correctly. bl_parse_scsi() can also fail after assigning d->bdev_file and dropping the file reference. Clear the pointer after fput() so that an outer cleanup path does not put it again.
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Oct 19, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from 5c83746a0cf2831d4b59f5cf99ef5fbf138564e4 before 8a2494964edac2a13e82441c2bf887548dc3be0b; 5c83746a0cf2831d4b59f5cf99ef5fbf138564e4 builds before 1e1c36b206c659cf94c6755a1d821ed1babd32bc; from 5c83746a0cf2831d4b59f5cf99ef5fbf138564e4 before 23e4162405c456ce12c772d5882d306135e828ae; from 5c83746a0cf2831d4b59f5cf99ef5fbf138564e4 before c056f817e4200fb18079d5052c273a22f191ff0a | CNA record |
References
- https://git.kernel.org/stable/c/8a2494964edac2a13e82441c2bf887548dc3be0b
- https://git.kernel.org/stable/c/1e1c36b206c659cf94c6755a1d821ed1babd32bc
- https://git.kernel.org/stable/c/23e4162405c456ce12c772d5882d306135e828ae
- https://git.kernel.org/stable/c/c056f817e4200fb18079d5052c273a22f191ff0a
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.