CVE-2026-64509

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the Rust block layer where GenDiskBuilder::build() fails to properly clean up resources during error paths following the blk mq alloc disk() function. Specifically, the error path only recovers foreign queue data, leading to a leak of the temporary gendisk and request queue until a later teardown occurs. If the last Arc<TagSet<T>> is moved into the build() function, the leaked queue may retain blk-mq state after the tag set is dropped. Additionally, GenDisk::drop() was not correctly paired with put disk() after del gendisk(), meaning that while del gendisk() unregisters the disk, the final reference must still be dropped to complete the release path.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.