CVE-2026-68312
Gravedad:
Pendiente de análisis
Tipo:
No Disponible / Otro tipo
Fecha de publicación:
10/08/2026
Última modificación:
10/08/2026
Descripción
*** Pendiente de traducción *** In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths<br />
<br />
In cifs_close_deferred_file(), cifs_close_all_deferred_files(), and<br />
cifs_close_deferred_file_under_dentry(), when a pending deferred close<br />
is cancelled via cancel_delayed_work(), the subsequent kmalloc_obj() to<br />
add the file to the local processing list may fail under memory pressure.<br />
The loop breaks immediately, but the cancelled work is no longer pending<br />
(it would have called _cifsFileInfo_put()), and the cfile is never added<br />
to file_head for processing. The cifsFileInfo reference and the open<br />
server handle both leak.<br />
<br />
Fix by saving the cfile that failed allocation in a local variable,<br />
breaking as before, and calling _cifsFileInfo_put() on it after<br />
releasing the lock. Any files later in the iteration are unaffected<br />
since their deferred work is still pending and will fire normally.



