SEPTEMBER 18, 2026
Live Feed
Back to database
Case File

CVE-2026-89576

UNKNOWN · CVSS N/A EPSS 0.21%

Source: NVD + CISA KEV + EPSS · Published 2026-09-11 · Last synced 2026-09-18

CyberRota Analysis

AI-Generated

The vulnerability affects the Linux kernel's dm-era functionality, specifically during the snapshot creation process where a failure can lead to a permanent leak of metadata blocks. This issue arises when the system allocates a shadow block but fails to properly release it upon encountering an error, resulting in resource wastage. Organizations using affected Linux systems should prioritize addressing this vulnerability to prevent potential degradation of system performance and resource management.

CVE
CVE-2026-89576
Severity
UNKNOWN
CVSS
N/A
EPSS
0.21%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: dm-era: fix shadowed superblock leak on take-snap failure metadata_take_snap() bumps the live superblock refcount and then dm_tm_shadow_block() allocates a new block for the metadata snapshot. If the subsequent dm_sm_inc_block() of writeset_tree_root or era_array_root fails, the function only unlocks the clone and returns. The newly allocated shadow block is never returned to the metadata space map, so each failed take-snap permanently leaks one metadata block. Free the clone with dm_sm_dec_block() on those error paths, matching the final step of metadata_drop_snap().