Linux Kernel Vulnerability in GenDisk Management

CVE-2026-64509

What is CVE-2026-64509?

A vulnerability in the Linux kernel's GenDisk management can lead to a memory leak. Specifically, the GenDiskBuilder::build() function does not handle error paths correctly after allocating disk structures. This oversight can result in retained references to temporary disk and request queue data, leading to potential performance degradation and resource exhaustion. The fix involves improving the cleanup process during failure scenarios to ensure that all allocated resources are properly released, thus maintaining system stability and efficiency.

References