Skip to main content
cve.nowby Sazabi
← All vulnerabilities
CVE-2026-97440

net: qrtr: fix node refcount leak on ctrl packet alloc failure

Published
Last modified
published
Not listed in CISA KEV
Fix
Fixed in 5.10.271, 5.15.222, 6.1.189, 6.6.158, 6.12.111, and 1 more
None on Exploit-DB, Metasploit or GitHub

Summary

In the Linux kernel, the following vulnerability has been resolved: net: qrtr: fix node refcount leak on ctrl packet alloc failure qrtr_send_resume_tx() calls qrtr_node_lookup() which takes a reference on the returned node. If the subsequent call to qrtr_alloc_ctrl_packet() fails due to memory allocation failure, the function returns -ENOMEM without calling qrtr_node_release() to release the node reference. Add qrtr_node_release(node) before returning on the allocation failure path to properly release the reference.

Timeline

  1. CVE published
  2. Record last updated

Affected versions

  • Linux Linux

    From cb6530b99fafea6c0636c4640bd21301d12cdbc9 · fixed in 78d066ecac9ce50441d4affae0df2093c4c3e62e; From cb6530b99fafea6c0636c4640bd21301d12cdbc9 · fixed in f3e90fbcd2d5ec1632bc2e8cdd1218f56bcb5fcf; From cb6530b99fafea6c0636c4640bd21301d12cdbc9 · fixed in c3515740174b778d0ee44acc477b51a6478da6b8; From cb6530b99fafea6c0636c4640bd21301d12cdbc9 · fixed in f76a39c45182d9137e053081cee9f2c197404ce6; From cb6530b99fafea6c0636c4640bd21301d12cdbc9 · fixed in 477353db343663d5502ca442c6de785d2f23f273; From cb6530b99fafea6c0636c4640bd21301d12cdbc9 · fixed in 9d969c98732a4d42212ec580dd5bbad53f246103; From cb6530b99fafea6c0636c4640bd21301d12cdbc9 · fixed in 3b09ff54114566864eea59020f6b69c5bb325b9d

  • Linux Linux

    5.6

  • KernelLinux

    From 5.6.0 · fixed in 5.10.271; From 5.11.0 · fixed in 5.15.222; From 5.16.0 · fixed in 6.1.189; From 6.2.0 · fixed in 6.6.158; From 6.7.0 · fixed in 6.12.111; From 6.13.0 · fixed in 6.18.53

References 7

git.kernel.org