CVE-2026-72184

Summary

In the Linux kernel, the following vulnerability has been resolved:

ntfs: fix hole runlist memory leak in insert range error path

ntfs_non_resident_attr_insert_range() allocates hole_rl before mapping the whole runlist. If ntfs_attr_map_whole_runlist() fails, the error path drops ni->runlist.lock and returns without freeing hole_rl. This leaks memory of sizeof(*hole_rl) * 2 bytes.

Fix this memory leak by freeing hole_rl before returning from that error path, matching the later error paths in the same function.

Affected Software

VendorProductVersion RangeStatus
LinuxLinux495e90fa334828d4119061e2726af51d0a0fb4ed < 7d7f72cb21a829682f6d8968af4fbe413789d1fdaffected
LinuxLinux495e90fa334828d4119061e2726af51d0a0fb4ed < 06769b8f23b4b645b270c438649fff79768fb6feaffected
LinuxLinux7.1affected
LinuxLinux0 < 7.1unaffected
LinuxLinux7.1.5 <= 7.1.*unaffected
LinuxLinux7.2 <= *unaffected

Weaknesses

References