The Linux kernel had a memory leak vulnerability in the block subsystem where blk_revalidate_disk_zones() could fail after disk_revalidate_zone_resources() allocated memory for args.zones_cond. In such failure cases, the allocated memory was not freed, leading to a leak. This flaw was fixed by ensuring proper memory release on error paths during zone revalidation. The vulnerability is identified as CVE-2026-53127 and is rated with a CVSS 3.1 vector indicating local attack vector, low complexity, low privileges required, no user interaction, unchanged scope, no confidentiality or integrity impact, but high availability impact.

The vulnerability causes a memory leak in the Linux kernel's block subsystem, which can degrade system availability by exhausting memory resources over time. There is no impact on confidentiality or integrity. No known exploits have been reported in the wild.

A fix for this memory leak vulnerability has been implemented in the Linux kernel. Users should apply the official kernel updates that include this fix once available. Patch status is not explicitly confirmed in the provided data; therefore, check the vendor advisory or Linux kernel mailing lists for the current remediation guidance.