Linux Kernel Vulnerability Affecting Resource Management

CVE-2026-99080

What is CVE-2026-99080?

A vulnerability has been identified in the Linux kernel related to the mishandling of xarray nodes during the inode clearing process. This memory leak has persisted over time but was recently triggered by specific usage patterns, particularly with the madvise system call. The proposed solution does not address the leaks at their source but introduces the xa_destroy() function, which effectively cycles the i_pages lock to mitigate the effects of these leaks.

References