CVE-2026-98553
Received Received - Intake

File Reference Leak in Linux Kernel autofs

Publication date: 2026-10-18

Last updated on: 2026-10-18

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: autofs: fix sbi->pipe file reference leak in autofs_kill_sb() When autofs_fill_super() fails before clearing AUTOFS_SBI_CATATONIC (for example, when find_get_pid() fails on an invalid pgrp mount option, or when an fs_context is closed before mounting), deactivate_locked_super() invokes autofs_kill_sb() -> autofs_catatonic_mode(sbi). Because AUTOFS_SBI_CATATONIC is still set in sbi->flags, autofs_catatonic_mode() returns early without calling fput(sbi->pipe), permanently leaking the pipe struct file reference. Explicitly release sbi->pipe in autofs_kill_sb() if it is still non-NULL after autofs_catatonic_mode().

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-18
Last Modified
2026-10-18
Generated
2026-10-18
AI Q&A
2026-10-18
EPSS Evaluated
N/A
NVD
CVE-2026-98553
EUVD
EUVD-2026-103598

Affected Vendors & Products

Showing 9 associated CPEs
Vendor Product Version / Range
Linux Linux ebc921ca9b92a3cf304d99bd7b7f373ec78c7ed7
Linux Linux ebc921ca9b92a3cf304d99bd7b7f373ec78c7ed7
Linux Linux ebc921ca9b92a3cf304d99bd7b7f373ec78c7ed7
Linux Linux ebc921ca9b92a3cf304d99bd7b7f373ec78c7ed7
Linux Linux ebc921ca9b92a3cf304d99bd7b7f373ec78c7ed7
Linux Linux ebc921ca9b92a3cf304d99bd7b7f373ec78c7ed7
Linux Linux ebc921ca9b92a3cf304d99bd7b7f373ec78c7ed7
Linux Linux ebc921ca9b92a3cf304d99bd7b7f373ec78c7ed7
Linux Linux 4.18

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is a file reference leak in the Linux kernel's autofs component. It occurs when autofs_fill_super() fails before clearing a specific flag, causing autofs_kill_sb() to skip releasing a pipe file reference. This leads to a permanent leak of the pipe struct file reference.

Detection Guidance

This vulnerability is specific to the Linux kernel's autofs component and may not have direct network detection methods. Check kernel logs for autofs-related errors or failures during mount operations. Use commands like dmesg | grep autofs or journalctl -k | grep autofs to inspect system logs for anomalies.

Impact Analysis

The impact is limited to resource exhaustion in the Linux kernel. A leaked pipe file reference may cause the system to run out of available file descriptors over time, potentially leading to performance degradation or system instability if exploited repeatedly.

Mitigation Strategies

Update the Linux kernel to the latest patched version that includes the fix for CVE-2026-98553. If immediate patching is not possible, avoid using autofs mounts with invalid pgrp options or unmount filesystems promptly to reduce exposure.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-98553. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart