Security Advisory

CVE-2026-23038

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2026-01-31 11:42:32
Last updated 2026-02-09 08:37:33
Assigner Linux
State PUBLISHED

Description

In the Linux kernel, the following vulnerability has been resolved: pnfs/flexfiles: Fix memory leak in nfs4_ff_alloc_deviceid_node() In nfs4_ff_alloc_deviceid_node(), if the allocation for ds_versions fails, the function jumps to the out_scratch label without freeing the already allocated dsaddrs list, leading to a memory leak. Fix this by jumping to the out_err_drain_dsaddrs label, which properly frees the dsaddrs list before cleaning up other resources.