CVE-2026-93795

A flaw was found in the Linux kernel's block control group (blk-cgroup) subsystem, which can lead to a Denial of Service (DoS). When an insertion failure occurs during the creation of a block group structure, the error-handling path fails to properly shut down reference counting. A local user can exploit this vulnerability to permanently leak memory and internal references, preventing affected control groups from being destroyed and exhausting system resources.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.