CVE-2026-97606

medium

Description

In the Linux kernel, the following vulnerability has been resolved: fs: autofs: fix memory leak in autofs_fill_super() In autofs_fill_super(), we create a new inode using autofs_new_ino(), however, if we fail to create root_inode, (that is, root_inode failure path), we return -ENOMEM without freeing the new inode(ino) that we created causing a memory leak. Fix this by adding autofs_free_ino() to free the inode we created in root_inode failure path before returning ENOMEM.

References

https://git.kernel.org/stable/c/9933ad1c4ff67680cd59c47f6d2e81b533bcd467

https://git.kernel.org/stable/c/6259b5d9bdc45fdb3158406b28c27fa074823159

https://git.kernel.org/stable/c/5ab54837fce04a1c9923d0bfd3d5de51fdc768b3

https://git.kernel.org/stable/c/4262b91e08e74cb5209ea737c554cf983d332382

Details

Source: Mitre, NVD

Published: 2026-09-25

Updated: 2026-09-25

Risk Information

CVSS v2

Base Score: 4.9

Vector: CVSS2#AV:L/AC:L/Au:N/C:N/I:N/A:C

Severity: Medium

CVSS v3

Base Score: 5.5

Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Severity: Medium

EPSS

EPSS: 0.002