Strix
56.9K

CVE-2026-72219

UnknownEPSS 0.21%

Last modified

CVE-2026-72219 is a vulnerability of currently unknown severity. In the Linux kernel, the following vulnerability has been resolved: lockd: Plug nlm_file leak when nlm_do_fopen() fails A client can repeatedly drive nlm_do_fopen() failures by presenting file handles that the underlying export rejects. After kzalloc_obj() succeeds in nlm_lookup_file(), the freshly allocated nlm_file is not yet inserted into nlm_files[]. EPSS estimates a 0.21% chance of exploitation in the next 30 days.

Description

In the Linux kernel, the following vulnerability has been resolved: lockd: Plug nlm_file leak when nlm_do_fopen() fails A client can repeatedly drive nlm_do_fopen() failures by presenting file handles that the underlying export rejects. After kzalloc_obj() succeeds in nlm_lookup_file(), the freshly allocated nlm_file is not yet inserted into nlm_files[]. The nlm_do_fopen() failure path jumps to out_unlock, which releases nlm_file_mutex and returns without freeing the allocation, so each failure leaks one nlm_file. Route the failure through out_free so kfree() runs before the function returns.

Metrics

EPSS Probability
0.21%

11.6th percentile

Probability of exploitation in the next 30 days. Learn more

Affected Software

Source: CNA advisory (CVE.org). NVD analysis pending.

VendorProductVersions
LinuxLinux>= e580323ac0b51ad10ec2e181d1f777479b7983e7, < bca74fff138429f3d5802865f38fc883d53a4f1a; >= 7f024fcd5c97dc70bb9121c80407cf3cf9be7159, < d7c677feb3aa1f42b1026d75a8ea61338b51e4fb; >= 7f024fcd5c97dc70bb9121c80407cf3cf9be7159, < 39f59bf67231ed2eb0cdf6337194360e964b609a; >= 7f024fcd5c97dc70bb9121c80407cf3cf9be7159, < ddfbd816273b4e9c9b836f5b8773664c6f40f807; >= 7f024fcd5c97dc70bb9121c80407cf3cf9be7159, < 1403f1221a35a6caf959bb7bf005741f17263c66; >= 7f024fcd5c97dc70bb9121c80407cf3cf9be7159, < 1161c4b5bd0048c8148e919f818a33cff3623ef0; >= 7f024fcd5c97dc70bb9121c80407cf3cf9be7159, < 3f2dc01b9cb516d4727a3b9263ee58c71ca00ba9; >= 7f024fcd5c97dc70bb9121c80407cf3cf9be7159, < f16a1513452edb532fec81e591c64c320866719c; >= 5.10.220, < 5.10.261
LinuxLinux5.15

References

Timeline

Published
Last Modified
Status
Received

Frequently Asked Questions

What is CVE-2026-72219?
In the Linux kernel, the following vulnerability has been resolved: lockd: Plug nlm_file leak when nlm_do_fopen() fails A client can repeatedly drive nlm_do_fopen() failures by presenting file handles that the underlying export rejects. After kzalloc_obj() succeeds in nlm_lookup_file(), the freshly allocated nlm_file is not yet inserted into nlm_files[]. The nlm_do_fopen() failure path jumps to out_unlock, which releases nlm_file_mutex and returns without freeing the allocation, so each failure leaks one nlm_file. Route the failure through out_free so kfree() runs before the function returns.
How severe is CVE-2026-72219?
Severity scoring for CVE-2026-72219 is pending analysis. The EPSS model estimates a 0.21% probability of exploitation in the next 30 days.
How do I fix CVE-2026-72219?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

How Strix Helps

Related CVEs from 2026

View all 2026CVEs →

Are you affected by CVE-2026-72219?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST