Executive brief
A memory leak was identified in the Linux kernel's NFS flexfiles layout driver. This component is used to manage high-performance file storage access. While not directly leading to data theft, such leaks can gradually consume system memory, potentially leading to system instability or performance degradation over time.
Technical details
A memory leak exists in the nfs4_ff_alloc_deviceid_node() function within fs/nfs/flexfilelayout/flexfilelayoutdev.c. The vulnerability is triggered when an allocation for 'ds_versions' fails; the error handling logic incorrectly jumps to a label that bypasses the deallocation of the 'dsaddrs' list. This results in leaked memory every time the specific failure condition is met. The fix involves redirecting the error jump to a label that properly drains and frees the dsaddrs list. This is a local resource exhaustion issue within the kernel's Parallel NFS (pNFS) flexfiles layout driver.
Affected products
- Linux Linux kernel NFS flexfiles layout driver
Timeline
- 2025-12-25: other: Patch authored
- 2026-01-31: disclosed: CVE published
References
- https://git.kernel.org/stable/c/0c728083654f0066f5e10a1d2b0bd0907af19a58
- https://git.kernel.org/stable/c/27c90d8ed81e7a289c9fe41b5e31d8bb609a3385
- https://git.kernel.org/stable/c/34b9dd179818ff7af2b36410985fd8166573c62d
- https://git.kernel.org/stable/c/869862056e100973e76ce9f5f1b01837771b7722
- https://git.kernel.org/stable/c/86da7efd12295a7e2b4abde5e5984c821edd938f
- https://git.kernel.org/stable/c/e2dde5dafb80f1af4028ed10ad255f42af71c784
- https://git.kernel.org/stable/c/ed5d3f2f6885eb99f729e6ffd946e3aa058bd3eb