cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Linux Linux)

CVE-2026-68312
Not available

At a glance

Source
NVD
EPSS
EPSS 0.21 % · percentile 11 ()
State
PUBLISHED
Published
Updated
Assigner
Linux
NVD status
Received

Description

In the Linux kernel, the following vulnerability has been resolved: cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths In cifs_close_deferred_file(), cifs_close_all_deferred_files(), and cifs_close_deferred_file_under_dentry(), when a pending deferred close is cancelled via cancel_delayed_work(), the subsequent kmalloc_obj() to add the file to the local processing list may fail under memory pressure. The loop breaks immediately, but the cancelled work is no longer pending (it would have called _cifsFileInfo_put()), and the cfile is never added to file_head for processing. The cifsFileInfo reference and the open server handle both leak. Fix by saving the cfile that failed allocation in a local variable, breaking as before, and calling _cifsFileInfo_put() on it after releasing the lock. Any files later in the iteration are unaffected since their deferred work is still pending and will fire normally.

References

European references

CERT-FR advisories

Affected products

ProductVersions
Linux · Linuxaffected e3fc065682ebbbd15b0ce0036800f4acbf765d46 < 75143abc21f627da7ee3b0336814bd702692e830 ; affected e3fc065682ebbbd15b0ce0036800f4acbf765d46 < c968b2417f6a15d35ff4b97d534af4a126cb510b ; affected e3fc065682ebbbd15b0ce0036800f4acbf765d46 < 7af7ec3af091f55d01f0ebe0246d10e37f358311 ; affected e3fc065682ebbbd15b0ce0036800f4acbf765d46 < 6089f561e2c31a3ba52836c75c7d2ab50d2eea41 ; affected e3fc065682ebbbd15b0ce0036800f4acbf765d46 < 32390b3f06f26e366cfb27dbac4bc0196c321535 ; affected e3fc065682ebbbd15b0ce0036800f4acbf765d46 < c2f2e83e3bbc5483730fd4ee903182761f1ae50f
Linux · Linuxaffected 5.15 ; unaffected 0 < 5.15 ; unaffected 6.1.191 ≤ 6.1.* ; unaffected 6.6.160 ≤ 6.6.* ; unaffected 6.12.114 ≤ 6.12.* ; unaffected 6.18.57 ≤ 6.18.*

Sources

SourceLicence
CVE List (CVEProject cvelistV5)CVE Program Terms of Use
EPSS (FIRST.org)FIRST — attribution requested
ENISA EUVDENISA — reproduction authorised, source acknowledged
CERT-FR (ANSSI)Licence Ouverte / Etalab 2.0
NVD (NIST) via fkie-cad/nvd-json-data-feedsPublic domain — this product uses data from the NVD API but is not endorsed or certified by the NVD