What’s Vulnerable › Vulnerabilities

CVE-2026-97606: fs: autofs: fix memory leak in autofs_fill_super()

• Severity: unknown
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-09-25 · updated 2026-10-19

Description

In the Linux kernel, the following vulnerability has been resolved: fs: autofs: fix memory leak in autofs_fill_super() In autofs_fill_super(), we create a new inode using autofs_new_ino(), however, if we fail to create root_inode, (that is, root_inode failure path), we return -ENOMEM without freeing the new inode(ino) that we created causing a memory leak. Fix this by adding autofs_free_ino() to free the inode we created in root_inode failure path before returning ENOMEM.

Affected products

• Linux kernel: 6.7 — fixed in 7.3

How to fix

Upgrade to a fixed version: Linux kernel 7.3. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/4262b91e08e74cb5209ea737c554cf983d332382
• https://git.kernel.org/stable/c/5ab54837fce04a1c9923d0bfd3d5de51fdc768b3
• https://git.kernel.org/stable/c/6259b5d9bdc45fdb3158406b28c27fa074823159
• https://git.kernel.org/stable/c/9933ad1c4ff67680cd59c47f6d2e81b533bcd467

Get alerted when CVE-2026-97606 or the next vulnerability affects your stack