Instituto Nacional de ciberseguridad. Sección Incibe
Instituto Nacional de Ciberseguridad. Sección INCIBE-CERT

CVE-2026-68312

Gravedad:
Pendiente de análisis
Tipo:
No Disponible / Otro tipo
Fecha de publicación:
10/08/2026
Última modificación:
10/08/2026

Descripción

*** Pendiente de traducción *** In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths<br /> <br /> In cifs_close_deferred_file(), cifs_close_all_deferred_files(), and<br /> cifs_close_deferred_file_under_dentry(), when a pending deferred close<br /> is cancelled via cancel_delayed_work(), the subsequent kmalloc_obj() to<br /> add the file to the local processing list may fail under memory pressure.<br /> The loop breaks immediately, but the cancelled work is no longer pending<br /> (it would have called _cifsFileInfo_put()), and the cfile is never added<br /> to file_head for processing. The cifsFileInfo reference and the open<br /> server handle both leak.<br /> <br /> Fix by saving the cfile that failed allocation in a local variable,<br /> breaking as before, and calling _cifsFileInfo_put() on it after<br /> releasing the lock. Any files later in the iteration are unaffected<br /> since their deferred work is still pending and will fire normally.

Impacto