CVE-2026-97606

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-97606", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2026-09-24T16:01:01.158Z", "datePublished": "2026-09-25T10:22:17.835Z", "dateUpdated": "2026-10-19T09:10:10.114Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-10-19T09:10:10.114Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nfs: autofs: fix memory leak in autofs_fill_super()\n\nIn autofs_fill_super(), we create a new inode using\nautofs_new_ino(), however, if we fail to create root_inode,\n(that is, root_inode failure path), we return -ENOMEM without\nfreeing the new inode(ino) that we created causing a memory leak.\nFix this by adding autofs_free_ino() to free the inode we created\nin root_inode failure path before returning ENOMEM."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["fs/autofs/inode.c"], "versions": [{"version": "66917f85db6002ed09cd24186258892fcfca64b6", "lessThan": "4262b91e08e74cb5209ea737c554cf983d332382", "status": "affected", "versionType": "git"}, {"version": "66917f85db6002ed09cd24186258892fcfca64b6", "lessThan": "9933ad1c4ff67680cd59c47f6d2e81b533bcd467", "status": "affected", "versionType": "git"}, {"version": "66917f85db6002ed09cd24186258892fcfca64b6", "lessThan": "6259b5d9bdc45fdb3158406b28c27fa074823159", "status": "affected", "versionType": "git"}, {"version": "66917f85db6002ed09cd24186258892fcfca64b6", "lessThan": "5ab54837fce04a1c9923d0bfd3d5de51fdc768b3", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["fs/autofs/inode.c"], "versions": [{"version": "6.7", "status": "affected"}, {"version": "0", "lessThan": "6.7", "status": "unaffected", "versionType": "semver"}, {"version": "6.12.111", "lessThanOrEqual": "6.12.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.18.53", "lessThanOrEqual": "6.18.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.2.7", "lessThanOrEqual": "7.2.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.3", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.7", "versionEndExcluding": "6.12.111"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.7", "versionEndExcluding": "6.18.53"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.7", "versionEndExcluding": "7.2.7"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.7", "versionEndExcluding": "7.3"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/4262b91e08e74cb5209ea737c554cf983d332382"}, {"url": "https://git.kernel.org/stable/c/9933ad1c4ff67680cd59c47f6d2e81b533bcd467"}, {"url": "https://git.kernel.org/stable/c/6259b5d9bdc45fdb3158406b28c27fa074823159"}, {"url": "https://git.kernel.org/stable/c/5ab54837fce04a1c9923d0bfd3d5de51fdc768b3"}], "title": "fs: autofs: fix memory leak in autofs_fill_super()", "x_generator": {"engine": "bippy-1.2.0"}}}}

{}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Linux", "programFiles": ["fs/autofs/inode.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"lessThan": "4262b91e08e74cb5209ea737c554cf983d332382", "status": "affected", "version": "66917f85db6002ed09cd24186258892fcfca64b6", "versionType": "git"}, {"lessThan": "9933ad1c4ff67680cd59c47f6d2e81b533bcd467", "status": "affected", "version": "66917f85db6002ed09cd24186258892fcfca64b6", "versionType": "git"}, {"lessThan": "6259b5d9bdc45fdb3158406b28c27fa074823159", "status": "affected", "version": "66917f85db6002ed09cd24186258892fcfca64b6", "versionType": "git"}, {"lessThan": "5ab54837fce04a1c9923d0bfd3d5de51fdc768b3", "status": "affected", "version": "66917f85db6002ed09cd24186258892fcfca64b6", "versionType": "git"}]}, {"defaultStatus": "affected", "product": "Linux", "programFiles": ["fs/autofs/inode.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"status": "affected", "version": "6.7"}, {"lessThan": "6.7", "status": "unaffected", "version": "0", "versionType": "semver"}, {"lessThanOrEqual": "6.12.*", "status": "unaffected", "version": "6.12.111", "versionType": "semver"}, {"lessThanOrEqual": "6.18.*", "status": "unaffected", "version": "6.18.53", "versionType": "semver"}, {"lessThanOrEqual": "7.2.*", "status": "unaffected", "version": "7.2.7", "versionType": "semver"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "7.3", "versionType": "original_commit_for_fix"}]}], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nfs: autofs: fix memory leak in autofs_fill_super()\n\nIn autofs_fill_super(), we create a new inode using\nautofs_new_ino(), however, if we fail to create root_inode,\n(that is, root_inode failure path), we return -ENOMEM without\nfreeing the new inode(ino) that we created causing a memory leak.\nFix this by adding autofs_free_ino() to free the inode we created\nin root_inode failure path before returning ENOMEM."}], "id": "CVE-2026-97606", "lastModified": "2026-10-19T10:17:30.503", "metrics": {}, "published": "2026-09-25T11:17:14.657", "references": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/4262b91e08e74cb5209ea737c554cf983d332382"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/5ab54837fce04a1c9923d0bfd3d5de51fdc768b3"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/6259b5d9bdc45fdb3158406b28c27fa074823159"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/9933ad1c4ff67680cd59c47f6d2e81b533bcd467"}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "vulnStatus": "Received"}

{"bugzilla": {"description": "kernel: fs: autofs: fix memory leak in autofs_fill_super()", "id": "2541165", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2541165"}, "csaw": false, "cvss3": {"cvss3_base_score": "5.5", "cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "status": "draft"}, "cwe": "CWE-772", "details": ["In the Linux kernel, the following vulnerability has been resolved:\nfs: autofs: fix memory leak in autofs_fill_super()\nIn autofs_fill_super(), we create a new inode using\nautofs_new_ino(), however, if we fail to create root_inode,\n(that is, root_inode failure path), we return -ENOMEM without\nfreeing the new inode(ino) that we created causing a memory leak.\nFix this by adding autofs_free_ino() to free the inode we created\nin root_inode failure path before returning ENOMEM.", "A flaw was found in the Linux kernel. In the autofs file system, an error occurring during root directory initialization fails to release previously allocated internal tracking structures, resulting in a memory leak. A local user capable of triggering this failure path could repeatedly leak kernel memory, ultimately leading to system resource exhaustion and a Denial of Service (DoS)."], "name": "CVE-2026-97606", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:10", "fix_state": "Fix deferred", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 10"}, {"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Out of support scope", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/a:redhat:openshift:4", "fix_state": "Not affected", "package_name": "openshift/ose-rhel-coreos-8", "product_name": "Red Hat OpenShift Container Platform 4"}, {"cpe": "cpe:/a:redhat:openshift:4", "fix_state": "Not affected", "package_name": "openshift/ose-rhel-coreos-9", "product_name": "Red Hat OpenShift Container Platform 4"}], "public_date": "2026-09-25T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-97606\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-97606\nhttps://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-97606.mbox"], "threat_severity": "Low"}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[66917f85db6002ed09cd24186258892fcfca64b6,4262b91e08e74cb5209ea737c554cf983d332382)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[66917f85db6002ed09cd24186258892fcfca64b6,9933ad1c4ff67680cd59c47f6d2e81b533bcd467)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[66917f85db6002ed09cd24186258892fcfca64b6,6259b5d9bdc45fdb3158406b28c27fa074823159)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[66917f85db6002ed09cd24186258892fcfca64b6,5ab54837fce04a1c9923d0bfd3d5de51fdc768b3)"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "6.7"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[0,6.7)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.12.111,6.13.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.18.53,6.19.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[7.2.7,7.3.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[7.3-rc3,*]"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}], "created": "2026-09-25T20:15:14.131952+00:00", "updated": "2026-10-01T12:15:05.360464+00:00", "vendors": ["linux", "linux$PRODUCT$linux_kernel"]}