PT-2026-64730 · Linux · Linux

CVE-2026-64509 · Published 2026-07-25 · Updated 2026-07-25

NVD

In the Linux kernel, the following vulnerability has been resolved:

rust: block: fix GenDisk cleanup paths

GenDiskBuilder::build() still has fallible work after blk mq alloc disk(), but its error path only recovers the foreign queue data. That leaks the temporary gendisk and request queue until later teardown. If the caller moved the last Arc<TagSet> into build(), the leaked queue can retain blk-mq state after the tag set is dropped.

Fix the pre-registration failure path by dropping the temporary gendisk reference with put disk() before recovering queue data, so disk release() can tear down the owned queue.

Also pair GenDisk::drop() with put disk() after del gendisk(). Once a Rust GenDisk has been added with device add disk(), del gendisk() only unregisters it; the final gendisk reference still has to be dropped to complete the release path.

Related Identifiers

CVE-2026-64509

Affected Products

Linux

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2026-64509 · Security Note
• https://git.kernel.org/stable/c/d1dcaa5229a63a6b6df7e0f673fe576cf3d6e8cb · Note
• https://git.kernel.org/stable/c/6822a2685b4da9a87efd1fce4b042678a31ff734 · Note
• https://git.kernel.org/stable/c/2957771379fa335103a4b539db57bb2271e12142 · Note
• https://git.kernel.org/stable/c/e7636f26f77070a529c26d65afd217514ce85ce4 · Note