CVE-2026-68312
kernel: cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · August 10, 2026
Updated · August 31, 2026
Description
A flaw was found in the Linux kernel's Common Internet File System (CIFS) implementation. When a deferred file close operation is cancelled and memory allocation fails under pressure, a cifsFileInfo reference and an open server handle can leak. This resource leak could potentially lead to a Denial of Service (DoS) over time due to resource exhaustion.
Statement
This issue affects CIFS/SMB client mounts. Deferred close drain paths leak cifsFileInfo when kmalloc fails after cancelling delayed work. Systems not mounting CIFS shares are not affected.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-911 · Improper Update of Reference Count