MEDIUM

CVE-2026-53127

Linux Linux Kernel 2026-06-24 CVSS v3.1

CVSS

5.5

Description

In the Linux kernel, the following vulnerability has been resolved:

block: fix zones_cond memory leak on zone revalidation error paths

When blk_revalidate_disk_zones() fails after disk_revalidate_zone_resources()
has allocated args.zones_cond, the memory is leaked because no error path
frees it.

Summary dbcve.org

A memory leak exists in the Linux kernel's blk_revalidate_disk_zones() function. When disk_reallocate_zone_resources() allocates args.zones_cond memory and subsequent zone revalidation fails, the allocated memory is never freed because no error path handles its deallocation.

Mitigation

Apply the kernel patch that adds proper error path cleanup to free args.zones_cond memory when blk_revalidate_disk_zones() fails after allocation.

Patch Commit

Weakness (CWE)

CWE-401 Memory Leak

EPSS Score

0.1%

Probability of exploitation in next 30 days

1th percentile

References

https://git.kernel.org/stable/c/29153d128384fa7c48a8ca8d34094b1cbe2d5bdc Patch https://git.kernel.org/stable/c/2a2f520fda824b5a25c93f2249578ea150c24e06 Patch

View on dbcve.org

Base CVE data derived from NVD (public domain). Enrichment by dbcve.org (CC-BY-4.0). Fetched via API.

Back to CVE