fs/resctrl: Fix double-add of pseudo-locked region's RMID to free list
Published Aug 15, 2026
5.5
MEDIUMCVSS 3.1
EPSS 0.22%
Description
A pseudo-locked group's RMID is freed when it is created. On unmount rmdir_all_sub() unconditionally frees all RMID of all groups, resulting in a double-free of the pseudo-locked group's RMID. The consequence of this is that the original free results in the pseudo-locked group's RMID being added to the rmid_free_lru linked list and the second free then attempts to add the same RMID entry to the rmid_free_lru again.
Do not double-free a pseudo-locked group's RMID.
Affected products
-
- Version StatusaffectedConstraints
- Version StatusaffectedConstraints
- Version StatusaffectedConstraints
- Version StatusaffectedConstraints
- Version StatusaffectedConstraints
- Version StatusaffectedConstraints
- Version StatusaffectedConstraints
- Version StatusaffectedConstraints
- Version
-
- Version 4.19StatusaffectedConstraints-
- Version 0StatusunaffectedConstraints<4.19
- Version 5.10.266StatusunaffectedConstraints<=5.10.*
- Version 5.15.217StatusunaffectedConstraints<=5.15.*
- Version 6.1.184StatusunaffectedConstraints<=6.1.*
- Version 6.12.101StatusunaffectedConstraints<=6.12.*
- Version 6.18.40StatusunaffectedConstraints<=6.18.*
- Version 6.6.148StatusunaffectedConstraints<=6.6.*
- Version 7.1.5StatusunaffectedConstraints<=7.1.*
- Version 7.2StatusunaffectedConstraints<=*
- Version
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | |||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Linux | Linux | unaffected |
| |||||||||||||||||||||||||||||||||
| Linux | Linux | affected |
|
No data.
No data.
Red Hat Enterprise Linux 10
kernel
Fix deferred
Red Hat Enterprise Linux 6
kernel
Not affected
Red Hat Enterprise Linux 7
kernel
Not affected
Red Hat Enterprise Linux 7
kernel-rt
Not affected
Red Hat Enterprise Linux 8
kernel
Not affected
Red Hat Enterprise Linux 8
kernel-rt
Not affected
Red Hat Enterprise Linux 9
kernel
Fix deferred
Red Hat Enterprise Linux 9
kernel-rt
Fix deferred
| Product | Package | State | Advisory |
|---|---|---|---|
| Red Hat Enterprise Linux 10 | kernel | Fix deferred | n/a |
| Red Hat Enterprise Linux 6 | kernel | Not affected | n/a |
| Red Hat Enterprise Linux 7 | kernel | Not affected | n/a |
| Red Hat Enterprise Linux 7 | kernel-rt | Not affected | n/a |
| Red Hat Enterprise Linux 8 | kernel | Not affected | n/a |
| Red Hat Enterprise Linux 8 | kernel-rt | Not affected | n/a |
| Red Hat Enterprise Linux 9 | kernel | Fix deferred | n/a |
| Red Hat Enterprise Linux 9 | kernel-rt | Fix deferred | n/a |
No package ranges for this CVE.
Remediation
No remediation recorded yet.
References (13)
- https://access.redhat.com/security/cve/CVE-2026-72015 Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2516588 Issue Tracking
- https://git.kernel.org/stable/c/52007bfdce5310e8c8a29849bfbfb188a1e50ca0
- https://git.kernel.org/stable/c/52b769165f20b38092f28ce064b4b143471540a7
- https://git.kernel.org/stable/c/9168176894332312c12ef052e784735dbf4ffe3f
- https://git.kernel.org/stable/c/ad12e70d7dc3c94a05efc61d1e4861078e0e162b
- https://git.kernel.org/stable/c/b2fe9e140aa94b2816aab7ebc692b543e418f5e3
- https://git.kernel.org/stable/c/b9f089723aee892efc77c349ae47a6b452b293c4
- https://git.kernel.org/stable/c/bab7dbba38ed3011972c3d9be2dcdca7575cbe32
- https://git.kernel.org/stable/c/f7628eea9212e185a09df3aea603ca8580b8678d
- https://lore.kernel.org/linux-cve-announce/2026081508-CVE-2026-72015-fc61@gregkh/T
- https://nvd.nist.gov/vuln/detail/CVE-2026-72015
- https://www.cve.org/CVERecord?id=CVE-2026-72015
Change history (0)
No recorded changes yet.