CVE-2026-23038

A flaw was found in the Linux kernel. A local user could exploit this flaw by triggering a specific condition in the nfs4_ff_alloc_deviceid_node() function within the pnfs/flexfiles module. This occurs because the dsaddrs list is not properly freed when the allocation for ds_versions fails. This memory leak could result in a Denial of Service (DoS) due to resource exhaustion.

A memory leak in pnfs flexfiles can occur in nfs4_ff_alloc_deviceid_node when allocation of ds_versions fails after dsaddrs has already been allocated. In that error path the function jumps to a cleanup label that does not drain the dsaddrs list which leaves an unreferenced allocation behind. Repeating the failing operation can accumulate leaked memory and may eventually cause a denial of service through resource exhaustion. For the CVSS the PR:H is typical because configuring and exercising pnfs flexfiles is usually limited to administrators and privileged services. The issue is not directly network reachable based on the patch context. Impact is availability only and is limited to memory consumption.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.