fs/resctrl: Fix double-add of pseudo-locked region's RMID to free list
Published Aug 15, 2026
5.5
MEDIUMCVSS 3.1
EPSS 0.22%
Description
A pseudo-locked group's RMID is freed when it is created. On unmount rmdir_all_sub() unconditionally frees all RMID of all groups, resulting in a double-free of the pseudo-locked group's RMID. The consequence of this is that the original free results in the pseudo-locked group's RMID being added to the rmid_free_lru linked list and the second free then attempts to add the same RMID entry to the rmid_free_lru again.
Do not double-free a pseudo-locked group's RMID.
Affected products
-
Affected
- ≥ , <
- ≥ , <
- ≥ , <
- ≥ , <
- ≥ , <
- ≥ , <
- ≥ , <
- ≥ , <
-
Affected
- 4.19
Unaffected
- ≥ 0, < 4.19
- ≥ 5.10.266, ≤ 5.10.*
- ≥ 5.15.217, ≤ 5.15.*
- ≥ 6.1.184, ≤ 6.1.*
- ≥ 6.12.101, ≤ 6.12.*
- ≥ 6.18.40, ≤ 6.18.*
- ≥ 6.6.148, ≤ 6.6.*
- ≥ 7.1.5, ≤ 7.1.*
- 7.2
Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).
| Vendor | Product | Default status | Versions |
|---|---|---|---|
| Linux | Linux | unaffected | Affected
|
| Linux | Linux | affected | Affected
Unaffected
|
No data.
No data.
Red Hat Enterprise Linux 10
kernel
Fix deferred
Red Hat Enterprise Linux 6
kernel
Not affected
Red Hat Enterprise Linux 7
kernel
Not affected
Red Hat Enterprise Linux 7
kernel-rt
Not affected
Red Hat Enterprise Linux 8
kernel
Not affected
Red Hat Enterprise Linux 8
kernel-rt
Not affected
Red Hat Enterprise Linux 9
kernel
Fix deferred
Red Hat Enterprise Linux 9
kernel-rt
Fix deferred
| Product | Package | State | Advisory |
|---|---|---|---|
| Red Hat Enterprise Linux 10 | kernel | Fix deferred | n/a |
| Red Hat Enterprise Linux 6 | kernel | Not affected | n/a |
| Red Hat Enterprise Linux 7 | kernel | Not affected | n/a |
| Red Hat Enterprise Linux 7 | kernel-rt | Not affected | n/a |
| Red Hat Enterprise Linux 8 | kernel | Not affected | n/a |
| Red Hat Enterprise Linux 8 | kernel-rt | Not affected | n/a |
| Red Hat Enterprise Linux 9 | kernel | Fix deferred | n/a |
| Red Hat Enterprise Linux 9 | kernel-rt | Fix deferred | n/a |
No package ranges for this CVE.
Remediation
No remediation recorded yet.
References (14)
- https://access.redhat.com/security/cve/CVE-2026-72015 Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2516588 Issue Tracking
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-59114 Advisory
- https://git.kernel.org/stable/c/52007bfdce5310e8c8a29849bfbfb188a1e50ca0
- https://git.kernel.org/stable/c/52b769165f20b38092f28ce064b4b143471540a7
- https://git.kernel.org/stable/c/9168176894332312c12ef052e784735dbf4ffe3f
- https://git.kernel.org/stable/c/ad12e70d7dc3c94a05efc61d1e4861078e0e162b
- https://git.kernel.org/stable/c/b2fe9e140aa94b2816aab7ebc692b543e418f5e3
- https://git.kernel.org/stable/c/b9f089723aee892efc77c349ae47a6b452b293c4
- https://git.kernel.org/stable/c/bab7dbba38ed3011972c3d9be2dcdca7575cbe32
- https://git.kernel.org/stable/c/f7628eea9212e185a09df3aea603ca8580b8678d
- https://lore.kernel.org/linux-cve-announce/2026081508-CVE-2026-72015-fc61@gregkh/T
- https://nvd.nist.gov/vuln/detail/CVE-2026-72015
- https://www.cve.org/CVERecord?id=CVE-2026-72015
Change history (0)
No recorded changes yet.
CVE.org / MITRE
CISA Vulnrichment
No data
GitHub
No data