CVE-2026-23038
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
31/01/2026
Last modified:
31/01/2026
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
pnfs/flexfiles: Fix memory leak in nfs4_ff_alloc_deviceid_node()<br />
<br />
In nfs4_ff_alloc_deviceid_node(), if the allocation for ds_versions fails,<br />
the function jumps to the out_scratch label without freeing the already<br />
allocated dsaddrs list, leading to a memory leak.<br />
<br />
Fix this by jumping to the out_err_drain_dsaddrs label, which properly<br />
frees the dsaddrs list before cleaning up other resources.



