The Linux kernel autofs subsystem contains a flaw in the autofs_fill_super() function: an inode is allocated during the mount operation, and if the subsequent root inode allocation fails, the function returns an error without freeing the initially allocated inode. This results in a memory leak that gradually consumes kernel memory. No user data or kernel information is disclosed, but the depletion of critical kernel resources can degrade system performance and eventually lead to a denial‑of‑service condition.

All Linux kernel releases that include the autofs filesystem before the commit 4262b91e08e74cb5209ea737c554cf983d332382 are vulnerable. This applies to common distributions that ship unpatched kernels across supported architectures. The vulnerability resides solely within the autofs module; any system that mounts or uses that module is at risk.

The flaw requires execution with kernel privileges; therefore the likely attack vector is local, inferred from the need to trigger the autofs mount operation. No remote exploitation path is described. The CVSS score of 5.5 indicates moderate severity, and the EPSS score of less than 1 % suggests a low probability of active exploitation. The vulnerability is not listed in CISA’s KEV catalog. An attacker who can gain local kernel access could repeatedly trigger the leak by mounting autofs file systems, potentially exhausting kernel memory and causing system instability.