CVE-2026-97606fs: autofs: fix memory leak in autofs_fill_super()
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: fs: autofs: fix memory leak in autofs_fill_super() In autofs_fill_super(), we create a new inode using autofs_new_ino(), however, if we fail to create root_inode, (that is, root_inode failure path), we return -ENOMEM without freeing the new inode(ino) that we created causing a memory leak. Fix this by adding autofs_free_ino() to free the inode we created in root_inode failure path before returning ENOMEM.
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Oct 19, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | 66917f85db6002ed09cd24186258892fcfca64b6 builds before 4262b91e08e74cb5209ea737c554cf983d332382; 66917f85db6002ed09cd24186258892fcfca64b6 builds before 9933ad1c4ff67680cd59c47f6d2e81b533bcd467; 66917f85db6002ed09cd24186258892fcfca64b6 builds before 6259b5d9bdc45fdb3158406b28c27fa074823159; 66917f85db6002ed09cd24186258892fcfca64b6 builds before 5ab54837fce04a1c9923d0bfd3d5de51fdc768b3 | CNA record |
References
- https://git.kernel.org/stable/c/4262b91e08e74cb5209ea737c554cf983d332382
- https://git.kernel.org/stable/c/9933ad1c4ff67680cd59c47f6d2e81b533bcd467
- https://git.kernel.org/stable/c/6259b5d9bdc45fdb3158406b28c27fa074823159
- https://git.kernel.org/stable/c/5ab54837fce04a1c9923d0bfd3d5de51fdc768b3
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.