CVE-2026-23038
Description
A flaw was found in the Linux kernel. A local user could exploit this flaw by triggering a specific condition in the nfs4_ff_alloc_deviceid_node() function within the pnfs/flexfiles module. This occurs because the dsaddrs list is not properly freed when the allocation for ds_versions fails. This memory leak could result in a Denial of Service (DoS) due to resource exhaustion.
Statement
A memory leak in pnfs flexfiles can occur in nfs4_ff_alloc_deviceid_node when allocation of ds_versions fails after dsaddrs has already been allocated. In that error path the function jumps to a cleanup label that does not drain the dsaddrs list which leaves an unreferenced allocation behind. Repeating the failing operation can accumulate leaked memory and may eventually cause a denial of service through resource exhaustion. For the CVSS the PR:H is typical because configuring and exercising pnfs flexfiles is usually limited to administrators and privileged services. The issue is not directly network reachable based on the patch context. Impact is availability only and is limited to memory consumption.
Common Vulnerability Scoring System (CVSS) Score Details
Info alert:Important note
CVSS scores for open source components depend on vendor-specific factors (e.g. version or build chain). Therefore, Red Hat's score and impact rating can be different from NVD and other vendors. Red Hat remains the authoritative CVE Naming Authority (CNA) source for its products and services (see Red Hat classifications).
The following CVSS metrics and score provided are preliminary and subject to review.
CVSS v3 Score Breakdown
| Red Hat | NVD | cve.org | |
|---|---|---|---|
| Base Score | 5.5 | N/A | N/A |
| Attack Vector | Local | N/A | N/A |
| Attack Complexity | Low | N/A | N/A |
| Privileges Required | Low | N/A | N/A |
| User Interaction | None | N/A | N/A |
| Scope | Unchanged | N/A | N/A |
| Confidentiality | None | N/A | N/A |
| Integrity Impact | None | N/A | N/A |
| Availability Impact | High | N/A | N/A |
Vector
Red Hat: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Understanding the Weakness (CWE)
Availability
Technical Impact: DoS: Resource Consumption (Other); DoS: Resource Consumption (Memory); DoS: Resource Consumption (CPU)
An attacker that can influence the allocation of resources that are not properly released could deplete the available resource pool and prevent all other processes from accessing the same type of resource. Frequently-affected resources include memory, CPU, disk space, power or battery, etc.
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
