Refcount Leak in Linux Kernel's Target Device Handling

CVE-2026-98128

What is CVE-2026-98128?

In the Linux kernel, a refcount leak was identified in the mpi3mr module specifically related to the handling of target devices. When the function mpi3mr_get_tgtdev_by_addr() acquires a reference to a device, it fails to release it in the event of an error that triggers the out_fail path, leading to a potential memory leak. The fix involves adding a reference drop for the target device in the cleanup path, ensuring that the reference is properly released, thereby preventing the target device structure from remaining allocated indefinitely. This vulnerability impacts the handling of SAS_END_DEVICE types, emphasizing the importance of robust memory management practices in kernel development.

References