CVE-2026-72219
In the Linux kernel, the following vulnerability has been resolved: lockd: Plug nlm_file leak when nlm_do_fopen() fails A client can repeatedly drive nlm_do_fopen() failures by presenting file handles that the underlying export rejects. After kzalloc_obj() succeeds in nlm_lookup_file(), the freshly allocated nlm_file is not yet inserted into nlm_files[]. The nlm_do_fopen() failure path jumps to out_unlock, which releases nlm_file_mutex and returns without freeing the allocation, so each failure leaks one nlm_file. Route the failure through out_free so kfree() runs before the function returns.
Affected versions
Linux kernel versions
5.10.220,
5.15
and later are affected. Fixed in
5.10.261,
5.15.212,
6.1.178,
6.6.145,
6.12.97,
6.18.40,
7.1.5,
7.2-rc1
and their respective stable series.
References
8 totalFrequently asked questions
-
What is CVE-2026-72219?
CVE-2026-72219 is a unscored severity Linux kernel vulnerability . It affects Linux kernel versions from 5.10.220 onward and has been patched in 5.10.261, 5.15.212, 6.1.178 and others. CVE-2026-72219 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.
-
Is there a patch available for CVE-2026-72219?
Yes. CVE-2026-72219 has been patched. Fixed versions include 5.10.261, 5.15.212, 6.1.178 and others. If you are running Linux kernel 5.10.220 or later up to the fix versions, apply the relevant patch for your kernel branch.
-
Is CVE-2026-72219 actively exploited?
No. CVE-2026-72219 has not been confirmed as actively exploited. It is not listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.