PT-2026-52020 · Linux · Linux Kernel

Published 2026-06-24 · Updated 2026-06-24 · CVE-2026-53126

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A disk reference leak occurs in the blkcg maybe throttle current() function. When blkcg lookup, blkg lookup, or blkg tryget() fails, the function fails to call put disk() on the error path. This prevents the release of the disk reference acquired by blkcg schedule throttle() via get device(). Because current->throttle disk is set to NULL before the lookup, blkcg exit() cannot release the reference, resulting in the disk never being freed.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2026-53126

Affected Products

Linux Kernel

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2026-53126 · Security Note
• https://git.kernel.org/stable/c/73a5af059905d171b398c8b2381632ee499948b5 · Note
• https://twitter.com/CVEnew/status/2069845524476575768 · Twitter Post
• https://git.kernel.org/stable/c/000e8454692cab9d1f1b80130e2870e355301d06 · Note
• https://twitter.com/infoflowcloud/status/2069847056785510624 · Twitter Post
• https://git.kernel.org/stable/c/b3e005f16cd98f815429a87aef4c61e9c140779f · Note
• https://git.kernel.org/stable/c/4048ed98860d3785645ebbd34f69566a6c7320c3 · Note
• https://git.kernel.org/stable/c/23308af722fefed00af5f238024c11710938fba3 · Note