All vulnerabilities
CVE-2026-97606

Linux: fs: autofs: fix memory leak in autofs_fill_super()

Linux LinuxOperating systems
Open in ThreatlineRecord JSON
CVSS
NoneNot scored
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.20%Chance of exploitation activity in the next 30 days, higher than 9% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed in4262b91e08e74cb5209ea737c554cf983d332382Also 9933ad1c4ff67680cd59c47f6d2e81b533bcd467, 6259b5d9bdc45fdb3158406b28c27fa074823159 and 1 moreCVE List
Published25 Sep 2026Updated 19 Oct 2026CVE List

What fixes it

  • 4262b91e08e74cb5209ea737c554cf983d332382LinuxCVE List
  • 9933ad1c4ff67680cd59c47f6d2e81b533bcd467LinuxCVE List
  • 6259b5d9bdc45fdb3158406b28c27fa074823159LinuxCVE List
  • 5ab54837fce04a1c9923d0bfd3d5de51fdc768b3LinuxCVE List

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Description

In the Linux kernel, the following vulnerability has been resolved:

fs: autofs: fix memory leak in autofs_fill_super()

In autofs_fill_super(), we create a new inode using autofs_new_ino(), however, if we fail to create root_inode, (that is, root_inode failure path), we return -ENOMEM without freeing the new inode(ino) that we created causing a memory leak. Fix this by adding autofs_free_ino() to free the inode we created in root_inode failure path before returning ENOMEM.

Text from CVE List

Affected versions 10

  • Linuxaffected: 66917f85db6002ed09cd24186258892fcfca64b6 before 4262b91e08e74cb5209ea737c554cf983d332382CVE List
  • Linuxaffected: 66917f85db6002ed09cd24186258892fcfca64b6 before 9933ad1c4ff67680cd59c47f6d2e81b533bcd467CVE List
  • Linuxaffected: 66917f85db6002ed09cd24186258892fcfca64b6 before 6259b5d9bdc45fdb3158406b28c27fa074823159CVE List
  • Linuxaffected: 66917f85db6002ed09cd24186258892fcfca64b6 before 5ab54837fce04a1c9923d0bfd3d5de51fdc768b3CVE List
  • Linuxaffected: 6.7CVE List
  • Linuxunaffected: all versions before 6.7CVE List
  • Linuxunaffected: 6.12.111 through 6.12.*CVE List
  • Linuxunaffected: 6.18.53 through 6.18.*CVE List
  • Linuxunaffected: 7.2.7 through 7.2.*CVE List
  • Linuxunaffected: 7.3CVE List

References 4