CVE-2026-97606 PUBLISHED

fs: autofs: fix memory leak in autofs_fill_super()

Assigner: Linux
Reserved: 24.09.2026 Published: 25.09.2026 Updated: 25.09.2026

In the Linux kernel, the following vulnerability has been resolved:

fs: autofs: fix memory leak in autofs_fill_super()

In autofs_fill_super(), we create a new inode using autofs_new_ino(), however, if we fail to create root_inode, (that is, root_inode failure path), we return -ENOMEM without freeing the new inode(ino) that we created causing a memory leak. Fix this by adding autofs_free_ino() to free the inode we created in root_inode failure path before returning ENOMEM.

Product Status

Vendor Linux
Product Linux
Versions Default: unaffected
  • affected from 66917f85db6002ed09cd24186258892fcfca64b6 to 4262b91e08e74cb5209ea737c554cf983d332382 (excl.)
  • affected from 66917f85db6002ed09cd24186258892fcfca64b6 to 9933ad1c4ff67680cd59c47f6d2e81b533bcd467 (excl.)
  • affected from 66917f85db6002ed09cd24186258892fcfca64b6 to 6259b5d9bdc45fdb3158406b28c27fa074823159 (excl.)
  • affected from 66917f85db6002ed09cd24186258892fcfca64b6 to 5ab54837fce04a1c9923d0bfd3d5de51fdc768b3 (excl.)
Vendor Linux
Product Linux
Versions Default: affected
  • Version 6.7 is affected
  • unaffected from 0 to 6.7 (excl.)
  • unaffected from 6.12.111 to 6.12.* (incl.)
  • unaffected from 6.18.53 to 6.18.* (incl.)
  • unaffected from 7.2.7 to 7.2.* (incl.)
  • unaffected from 7.3-rc3 to * (incl.)

References