CVE-2026-23032

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains an issue where references to fault configfs items are not released when a nullbX device is removed, leading to a kernel memory leak (kmemleak). This occurs when the CONFIG BLK DEV NULL BLK FAULT INJECTION configuration option is enabled. The issue involves the timeout inject, requeue inject, and init hctx fault inject configfs items created as children of the nullbX configfs group. The fix involves explicitly releasing these references when the reference to the top-level nullbX configfs group is dropped.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.