CVE detail
CVE-2026-72219
In the Linux kernel, the following vulnerability has been resolved: lockd: Plug nlm_file leak when nlm_do_fopen() fails A client can repeatedly drive nlm_do_fopen() failures by presenting file handles that the underlying export rejects. After kzalloc_obj() succeeds in nlm_lookup_file(), the freshly allocated nlm_file is not yet inserted into nlm_files[]. The nlm_do_fopen() failure path jumps to out_unlock, which releases nlm_file_mutex and returns without freeing the allocation, so each failure leaks one nlm_file. Route the failure through out_free so kfree() runs before the function returns.
Buzz score
Why this CVE is surfacing
This all-time snapshot uses the same composite formula as Trending across a 30-year evidence window, rather than a current rolling window.
Buzz score components · mention 22.0 · diversity 5.0 · KEV 0.0 · OTX 0.0 · PoC 0.0
Why it matters now
Mention timeline
- Total mentions
- 8
- within the 30d window
- Peak daily
- 8
- highest bucket
Evidence
Source links by recency
8 source links · newest first
No excerpt available.
Exploitgit.kernel.orgAug 15, 2026, 6:21 AMNo excerpt available.
Exploitgit.kernel.orgAug 15, 2026, 6:21 AMNo excerpt available.
Exploitgit.kernel.orgAug 15, 2026, 6:21 AMNo excerpt available.
Exploitgit.kernel.orgAug 15, 2026, 6:21 AMNo excerpt available.
Exploitgit.kernel.orgAug 15, 2026, 6:21 AMNo excerpt available.
Exploitgit.kernel.orgAug 15, 2026, 6:21 AMNo excerpt available.
Exploitgit.kernel.orgAug 15, 2026, 6:21 AMNo excerpt available.
Exploitgit.kernel.orgAug 15, 2026, 6:21 AM
Exploit code
Public exploit repository references
Public PoC repositories are third-party, potentially unsafe artifacts. Treat their code as untrusted and use it only on authorized systems in an isolated, least-privilege environment. cvebuzz does not execute the code or verify that an exploit works.