CVE-2026-97606

CVE-2026-97606

published September 25, 2026

CVSS
—
EPSS
0%
Percentile
9.3
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

fs: autofs: fix memory leak in autofs_fill_super()

In autofs_fill_super(), we create a new inode using

autofs_new_ino(), however, if we fail to create root_inode,

(that is, root_inode failure path), we return -ENOMEM without

freeing the new inode(ino) that we created causing a memory leak.

Fix this by adding autofs_free_ino() to free the inode we created

in root_inode failure path before returning ENOMEM.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00200 · 9.3th percentile
Published
2026-09-25T15:17Z
References (4)
EPSS history
Timeline
  • 27 SEP 03:28Z
    EPSS moved — → 0%
    epss
  • 25 SEP 10:22Z
    fs: autofs: fix memory leak in autofs_fill_super()
    cvelistv5