In the Linux kernel, the following vulnerability has been resolved: fs: Free any excess xarray nodes in clear_inode() For many years we've had a… (CVE-2026-99080)

The Linux kernel contained a persistent memory leak of xarray nodes in the clear_inode() function, documented in commit 786b31121a2c. Recent findings, including those from syzbot, demonstrated ways to reliably trigger this leak using madvise. Instead of patching each leak occurrence individually, the resolution calls xa_destroy(), which frees any excess xarray nodes and cycles the i_pages lock, effectively eliminating the leak.

The vulnerability results in a memory leak of xarray nodes in the Linux kernel, which could degrade system stability or performance over time if exploited. There is no indication of direct code execution or privilege escalation from the provided data. No known exploits are reported in the wild.

A fix has been implemented in the Linux kernel by calling xa_destroy() in clear_inode() to free excess xarray nodes. Users should update to the kernel version containing this fix once available. Patch status is not explicitly confirmed in the provided data; therefore, check the official Linux kernel advisories for the exact fixed versions and remediation instructions.