Memory leak in Linux kernel - CVE-2026-99019

Vulnerability details

The vulnerability allows a local privileged user to leak kernel memory, potentially causing a denial of service through repeated resource exhaustion.

The vulnerability exists due to missing cleanup of allocated memory in the Linux kernel SCSI changer driver's probe error path when ch_probe() fails after ch_readconfig(). A local privileged user can trigger such probe failures to leave the allocated data transfer device pointer array unreleased, potentially exhausting kernel memory if the failures are repeated.

Affected software

How to mitigate CVE-2026-99019

External References

• https://git.kernel.org/stable/c/1d35a17f1c2ed4154731895694a1a3557f0da766
• https://git.kernel.org/stable/c/27c0f718d3b3c99e6d315308e95d987d0382a8a8
• https://git.kernel.org/stable/c/a34a230ccea1b8b667ae59dca11295a2c8f81738
• https://git.kernel.org/stable/c/cef2cedb6f7a394b278775b3d6ffb9b20ecd61db
• https://git.kernel.org/stable/c/ec6ecab1b7577ae555ee6b81480814d123dd9ec0

Related Security Bulletins

• Memory leak in Linux kernel scsi driver
• Debian update for linux