CVE-2026-53127
kernel: block: fix zones_cond memory leak on zone revalidation error paths
Severity
LowRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · June 24, 2026
Updated · July 24, 2026
Description
A flaw was found in the Linux kernel's block subsystem. This vulnerability allows for a memory leak when zone revalidation fails, specifically when blk_revalidate_disk_zones() encounters an error after memory has been allocated for zones_cond. This can lead to resource exhaustion, potentially resulting in a Denial of Service (DoS) for the system.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-772 · Missing Release of Resource after Effective Lifetime