CVE-2026-97606

Source
https://cve.org/CVERecord?id=CVE-2026-97606
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-97606.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-97606
Downstream
Published
2026-09-25T10:22:17Z
Modified
2026-09-26T03:48:30Z
Summary
fs: autofs: fix memory leak in autofs_fill_super()
Details

In the Linux kernel, the following vulnerability has been resolved:

fs: autofs: fix memory leak in autofs_fill_super()

In autofs_fill_super(), we create a new inode using autofs_new_ino(), however, if we fail to create root_inode, (that is, root_inode failure path), we return -ENOMEM without freeing the new inode(ino) that we created causing a memory leak. Fix this by adding autofs_free_ino() to free the inode we created in root_inode failure path before returning ENOMEM.

Database specific
{
    "cna_assigner":  "Linux",
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97606.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
66917f85db6002ed09cd24186258892fcfca64b6
Fixed
4262b91e08e74cb5209ea737c554cf983d332382
Fixed
9933ad1c4ff67680cd59c47f6d2e81b533bcd467
Fixed
6259b5d9bdc45fdb3158406b28c27fa074823159
Fixed
5ab54837fce04a1c9923d0bfd3d5de51fdc768b3

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-97606.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.12.111
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.18.53
Type
ECOSYSTEM
Events
Introduced
6.19.0
Fixed
7.2.7

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-97606.json"