CVE-2026-72219

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-72219
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-72219.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-72219
Downstream
Published
2026-08-15T05:54:13Z
Modified
2026-08-18T03:31:02Z
Summary
lockd: Plug nlm_file leak when nlm_do_fopen() fails
Details

In the Linux kernel, the following vulnerability has been resolved:

lockd: Plug nlm_file leak when nlm_do_fopen() fails

A client can repeatedly drive nlm_do_fopen() failures by presenting file handles that the underlying export rejects. After kzalloc_obj() succeeds in nlm_lookup_file(), the freshly allocated nlm_file is not yet inserted into nlm_files[]. The nlm_do_fopen() failure path jumps to out_unlock, which releases nlm_file_mutex and returns without freeing the allocation, so each failure leaks one nlm_file.

Route the failure through out_free so kfree() runs before the function returns.

Database specific 
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/72xxx/CVE-2026-72219.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
e580323ac0b51ad10ec2e181d1f777479b7983e7
Fixed
bca74fff138429f3d5802865f38fc883d53a4f1a
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
7f024fcd5c97dc70bb9121c80407cf3cf9be7159
Fixed
d7c677feb3aa1f42b1026d75a8ea61338b51e4fb
Fixed
39f59bf67231ed2eb0cdf6337194360e964b609a
Fixed
ddfbd816273b4e9c9b836f5b8773664c6f40f807
Fixed
1403f1221a35a6caf959bb7bf005741f17263c66
Fixed
1161c4b5bd0048c8148e919f818a33cff3623ef0
Fixed
3f2dc01b9cb516d4727a3b9263ee58c71ca00ba9
Fixed
f16a1513452edb532fec81e591c64c320866719c
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
5.10.220
Fixed
5.10.261

Affected versions

v5.*
v5.10.220
v5.10.221
v5.10.222
v5.10.223
v5.10.224
v5.10.225
v5.10.226
v5.10.227
v5.10.228
v5.10.229
v5.10.230
v5.10.231
v5.10.232
v5.10.233
v5.10.234
v5.10.235
v5.10.236
v5.10.237
v5.10.238
v5.10.239
v5.10.240
v5.10.241
v5.10.242
v5.10.243
v5.10.244
v5.10.245
v5.10.246
v5.10.247
v5.10.248
v5.10.249
v5.10.250
v5.10.251
v5.10.252
v5.10.253
v5.10.254
v5.10.255
v5.10.256
v5.10.257
v5.10.258
v5.10.259
v5.10.260

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-72219.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
5.10.261
Type
ECOSYSTEM
Events
Introduced
5.11.0
Fixed
5.15.212
Type
ECOSYSTEM
Events
Introduced
5.15.0
Fixed
6.1.178
Type
ECOSYSTEM
Events
Introduced
5.16.0
Fixed
6.6.145
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.12.97
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.18.40
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
7.1.5

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-72219.json"