CVE-2026-23026: dmaengine: qcom: gpi: Fix memory leak in gpi_peripheral_config()
In the Linux kernel, the following vulnerability has been resolved:
dmaengine: qcom: gpi: Fix memory leak in gpiperipheralconfig()
Fix a memory leak in gpiperipheralconfig() where the original memory pointed to by gchan->config could be lost if krealloc() fails.
The issue occurs when: 1. gchan->config points to previously allocated memory 2. krealloc() fails and returns NULL 3. The function directly assigns NULL to gchan->config, losing the reference to the original memory 4. The original memory becomes unreachable and cannot be freed
Fix this by using a temporary variable to hold the krealloc() result and only updating gchan->config when the allocation succeeds.
Found via static analysis and code review.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-23026?
CVE-2026-23026 has a moderate severity due to its potential to cause memory leak issues in the Linux kernel.
How do I fix CVE-2026-23026?
To fix CVE-2026-23026, update your Linux kernel to the latest version where this vulnerability has been resolved.
What does CVE-2026-23026 affect?
CVE-2026-23026 primarily affects the Linux kernel, specifically the dmaengine subsystem.
What is the impact of CVE-2026-23026?
The impact of CVE-2026-23026 is that it can lead to memory leaks, potentially affecting system stability and performance.
Who is primarily affected by CVE-2026-23026?
Users and systems running affected versions of the Linux kernel are primarily impacted by CVE-2026-23026.