PT-2026-116772 · Linux · Linux
CVE-2026-98553
·
Published
2026-10-18
·
Updated
2026-10-18
None
No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
In the Linux kernel, the following vulnerability has been resolved:
autofs: fix sbi->pipe file reference leak in autofs kill sb()
When autofs fill super() fails before clearing AUTOFS SBI CATATONIC (for
example, when find get pid() fails on an invalid pgrp mount option, or
when an fs context is closed before mounting), deactivate locked super()
invokes autofs kill sb() -> autofs catatonic mode(sbi).
Because AUTOFS SBI CATATONIC is still set in sbi->flags,
autofs catatonic mode() returns early without calling fput(sbi->pipe),
permanently leaking the pipe struct file reference.
Explicitly release sbi->pipe in autofs kill sb() if it is still non-NULL
after autofs catatonic mode().
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Linux