CVE-2026-98553: Linux kernel · autofs: fix sbi->pipe file reference leak in autofs_kill_sb()
Affects Linux kernelSource CVE Database V5
Not known to be exploited · fixed in fc4fd0281ac80b5a3c5a2330f688f0f9d2a420b6 : update Linux kernel when convenient.
Data as of 26 Oct 2026, 13:47 UTC
Rated Low by Threat Radar's AI analysis · CVSS not yet scored by NVD
- EPSS
- 0.2% chance of exploitation in 30 days – higher than 11% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.
- Patch
- Available – fixed in fc4fd0281ac80b5a3c5a2330f688f0f9d2a420b6, f1c57f5b16bbc3571bd479c290996c4d4e1fb931, aa5e44b29ffe4eaa08cc2237fd65bc2596bc023e +5
Exploitation evidence
Disclosed: evidence found.
CVE published 18 Oct 2026
Detectable: no evidence on record.
No public nuclei template indexed
Weaponised: no evidence on record.
No public exploit code indexed in Metasploit or Exploit-DB
Exploited in the wildExploited: no evidence on record.
Not in CISA KEV and no source reports exploitation
Observed by OffSeq MirageSeen by Mirage: no evidence on record.
No attack traffic recorded by OffSeq Mirage sensors
A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 26 Oct 2026.
What to do
Upgrade to a fixed release listed under Affected software.
Affected software
| Product | Affected | Fixed in |
|---|---|---|
| LinuxLinux | Affected
| Fixed in
|
| LinuxLinux | Affected
| Fixed in
|
| LinuxLinux | Affected
| Fixed in
|
| LinuxLinux | Affected
| Fixed in
|
| LinuxLinux | Affected
| Fixed in
|
| LinuxLinux | Affected
| Fixed in
|
Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.
AI-suggested
A fix for this vulnerability is available in the Linux kernel versions identified by the fixed commit hashes. Users should update their Linux kernel to a version including these fixes to remediate the issue. No additional mitigation steps are indicated.
Description
A vulnerability in the Linux kernel autofs subsystem causes a file reference leak of sbi->pipe in the autofs_kill_sb() function. This occurs when autofs_fill_super() fails before clearing the AUTOFS_SBI_CATATONIC flag, leading to autofs_catatonic_mode() returning early without releasing the pipe file reference. The issue results in a permanent leak of the pipe struct file reference. The flaw has been fixed by explicitly releasing sbi->pipe if it remains non-NULL after autofs_catatonic_mode() is called.
References
- git.kernel.org/stable/c/3684e2273ba94553af3c5195a46a50214a1a96e3 (opens in a new tab)
- git.kernel.org/stable/c/0662b1ff9b383d5a233d344e4dc518c27a17f7b8 (opens in a new tab)
- git.kernel.org/stable/c/34fa4c1c6e10507dc60e35a82cc9655666946cfd (opens in a new tab)
- git.kernel.org/stable/c/a58593b501b7be5ad2bc5181bfa8cd4599be257c (opens in a new tab)
- git.kernel.org/stable/c/f1c57f5b16bbc3571bd479c290996c4d4e1fb931 (opens in a new tab)
- git.kernel.org/stable/c/4bcb371019097d0e357f097902587401c509bbc9 (opens in a new tab)
- git.kernel.org/stable/c/fc4fd0281ac80b5a3c5a2330f688f0f9d2a420b6 (opens in a new tab)
- git.kernel.org/stable/c/aa5e44b29ffe4eaa08cc2237fd65bc2596bc023e (opens in a new tab)