Linux Kernel Vulnerability in Cachefiles Module Affecting Multiple Versions

CVE-2026-43106

What is CVE-2026-43106?

A vulnerability has been identified in the cachefiles module of the Linux kernel, where an incorrect dentry reference count could lead to resource management issues. Specifically, the function cachefiles_cull() was not modified to align with the expectation of the cachefiles_bury_object() function, which requires two references to a dentry object. This oversight potentially results in a lost reference during execution. The solution requires cachefiles_cull() to correctly manage references before invoking cachefiles_bury_object() to ensure that resource cleanup is conducted reliably.

References