CVE-2026-97606

fs: autofs: fix memory leak in autofs_fill_super()

N/A
Published: September 25, 2026 at 10:22 AM UTC
Updated: October 19, 2026 at 10:17 AM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Severity
N/A
Exploit prediction
EPSS 0.2%

Description

In the Linux kernel, the following vulnerability has been resolved: fs: autofs: fix memory leak in autofs_fill_super() In autofs_fill_super(), we create a new inode using autofs_new_ino(), however, if we fail to create root_inode, (that is, root_inode failure path), we return -ENOMEM without freeing the new inode(ino) that we created causing a memory leak. Fix this by adding autofs_free_ino() to free the inode we created in root_inode failure path before returning ENOMEM.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

6.766917f85db6002ed09cd24186258892fcfca64b6
Vendor states this is fixed in 4262b91e08e74cb5209ea737c554cf983d332382 (fixed)
Vendor states this is fixed in 5ab54837fce04a1c9923d0bfd3d5de51fdc768b3 (fixed)
Vendor states this is fixed in 6259b5d9bdc45fdb3158406b28c27fa074823159 (fixed)
Vendor states this is fixed in 9933ad1c4ff67680cd59c47f6d2e81b533bcd467 (fixed)
Vendor states this is fixed in 6.12.111 (unaffected)
Vendor states this is fixed in 6.18.53 (unaffected)
Vendor states this is fixed in 6.7 (unaffected)
Vendor states this is fixed in 7.2.7 (unaffected)
Vendor states this is fixed in 7.3 (unaffected)
Vendor states this is fixed in 7.3-rc3 (unaffected)

Remediation

No guide yet

No remediation guidance has been written for this CVE yet, and no fixed version or vendor advisory is recorded against it.

Quick Info

StatusRECEIVED

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Free plan, no card