{"schema":"threatline.record/2","record":{"id":"CVE-2026-97606","aliases":[],"summary":"fs: autofs: fix memory leak in autofs_fill_super()","details":"In the Linux kernel, the following vulnerability has been resolved:\n\nfs: autofs: fix memory leak in autofs_fill_super()\n\nIn autofs_fill_super(), we create a new inode using\nautofs_new_ino(), however, if we fail to create root_inode,\n(that is, root_inode failure path), we return -ENOMEM without\nfreeing the new inode(ino) that we created causing a memory leak.\nFix this by adding autofs_free_ino() to free the inode we created\nin root_inode failure path before returning ENOMEM.","categories":["Operating systems"],"product":"Linux","vendor":"Linux","ecosystem":null,"affected_ranges":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97606","source_modified_at":"2026-10-19T09:10:10.114Z","fetched_at":"2026-10-23T18:45:31.882637Z","product":"Linux","vendor":"Linux","versions":[{"version":"66917f85db6002ed09cd24186258892fcfca64b6","lessThan":"4262b91e08e74cb5209ea737c554cf983d332382","status":"affected","versionType":"git"},{"version":"66917f85db6002ed09cd24186258892fcfca64b6","lessThan":"9933ad1c4ff67680cd59c47f6d2e81b533bcd467","status":"affected","versionType":"git"},{"version":"66917f85db6002ed09cd24186258892fcfca64b6","lessThan":"6259b5d9bdc45fdb3158406b28c27fa074823159","status":"affected","versionType":"git"},{"version":"66917f85db6002ed09cd24186258892fcfca64b6","lessThan":"5ab54837fce04a1c9923d0bfd3d5de51fdc768b3","status":"affected","versionType":"git"}],"defaultStatus":"unaffected"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97606","source_modified_at":"2026-10-19T09:10:10.114Z","fetched_at":"2026-10-23T18:45:31.882637Z","product":"Linux","vendor":"Linux","versions":[{"version":"6.7","status":"affected"},{"version":"0","lessThan":"6.7","status":"unaffected","versionType":"semver"},{"version":"6.12.111","lessThanOrEqual":"6.12.*","status":"unaffected","versionType":"semver"},{"version":"6.18.53","lessThanOrEqual":"6.18.*","status":"unaffected","versionType":"semver"},{"version":"7.2.7","lessThanOrEqual":"7.2.*","status":"unaffected","versionType":"semver"},{"version":"7.3","lessThanOrEqual":"*","status":"unaffected","versionType":"original_commit_for_fix"}],"defaultStatus":"affected"}],"fixed_versions":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97606","source_modified_at":"2026-10-19T09:10:10.114Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"name":"Linux","ecosystem":null},"version":"4262b91e08e74cb5209ea737c554cf983d332382","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97606","source_modified_at":"2026-10-19T09:10:10.114Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"name":"Linux","ecosystem":null},"version":"9933ad1c4ff67680cd59c47f6d2e81b533bcd467","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97606","source_modified_at":"2026-10-19T09:10:10.114Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"name":"Linux","ecosystem":null},"version":"6259b5d9bdc45fdb3158406b28c27fa074823159","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97606","source_modified_at":"2026-10-19T09:10:10.114Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"name":"Linux","ecosystem":null},"version":"5ab54837fce04a1c9923d0bfd3d5de51fdc768b3","basis":"first unaffected version stated in the CVE record"}],"cvss":null,"severity":null,"kev":{"listed":false},"epss":{"probability":0.002,"percentile":0.09309,"score_date":"2026-10-23"},"published_at":"2026-09-25T10:22:17.835Z","modified_at":"2026-10-19T09:10:10.114Z","provenance":[{"source":"CVE List","url":"https://www.cve.org/CVERecord?id=CVE-2026-97606","fetched_at":"2026-10-23T18:45:31.882637Z","source_modified_at":"2026-10-19T09:10:10.114Z"},{"source":"EPSS","url":"https://api.first.org/data/v1/epss?cve=CVE-2026-97606","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2026-10-23"}],"sources":["CVE List","EPSS"],"references":[{"source":"CVE List","url":"https://git.kernel.org/stable/c/4262b91e08e74cb5209ea737c554cf983d332382"},{"source":"CVE List","url":"https://git.kernel.org/stable/c/9933ad1c4ff67680cd59c47f6d2e81b533bcd467"},{"source":"CVE List","url":"https://git.kernel.org/stable/c/6259b5d9bdc45fdb3158406b28c27fa074823159"},{"source":"CVE List","url":"https://git.kernel.org/stable/c/5ab54837fce04a1c9923d0bfd3d5de51fdc768b3"}],"locations":[],"motoko_assessment":{"status":"requires_architecture_review","automatic_remediation":false},"cve_state":"PUBLISHED","classification":{"method":"product-first software-layer rules","rules_version":"2.1","matched_on":"product","confidence":"heuristic","reviewed":false},"change_timestamp":"2026-10-19T09:10:10.114Z","content_hash":"2cad4a29dfa9e8c2d2146ad90aba49b08e82939df7c44db798f59c7de9839c08"}}