CVE-2026-90150

A flaw was found in the Linux kernel's pnfs/blocklayout component. When parsing certain device layouts, specifically in the bl_parse_concat() and bl_parse_stripe() functions, a failure to parse a child device could result in the device not being properly released. This can lead to resource leaks, potentially causing system instability or a Denial of Service (DoS). Additionally, the bl_parse_scsi() function could fail in a way that leads to a double release of file references, further contributing to system instability.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.