Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2026-97440

net: qrtr: fix node refcount leak on ctrl packet alloc failure

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: net: qrtr: fix node refcount leak on ctrl packet alloc failure qrtr_send_resume_tx() calls qrtr_node_lookup() which takes a reference on the returned node. If the subsequent call to qrtr_alloc_ctrl_packet() fails due to memory allocation failure, the function returns -ENOMEM without calling qrtr_node_release() to release the node reference. Add qrtr_node_release(node) before returning on the allocation failure path to properly release the reference.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • cb6530b99fafea6c0636c4640bd21301d12cdbc9 to < 78d066ecac9ce50441d4affae0df2093c4c3e62eaffected
  • cb6530b99fafea6c0636c4640bd21301d12cdbc9 to < f3e90fbcd2d5ec1632bc2e8cdd1218f56bcb5fcfaffected
  • cb6530b99fafea6c0636c4640bd21301d12cdbc9 to < c3515740174b778d0ee44acc477b51a6478da6b8affected
  • cb6530b99fafea6c0636c4640bd21301d12cdbc9 to < f76a39c45182d9137e053081cee9f2c197404ce6affected
  • cb6530b99fafea6c0636c4640bd21301d12cdbc9 to < 477353db343663d5502ca442c6de785d2f23f273affected
  • cb6530b99fafea6c0636c4640bd21301d12cdbc9 to < 9d969c98732a4d42212ec580dd5bbad53f246103affected
  • cb6530b99fafea6c0636c4640bd21301d12cdbc9 to < 3b09ff54114566864eea59020f6b69c5bb325b9daffected

Linux Linux

Default version status: affected

  • 5.6affected
  • 0 to < 5.6unaffected
  • 5.10.271 to ≤ 5.10.*unaffected
  • 5.15.222 to ≤ 5.15.*unaffected
  • 6.1.189 to ≤ 6.1.*unaffected
  • 6.6.158 to ≤ 6.6.*unaffected
  • 6.12.111 to ≤ 6.12.*unaffected
  • 6.18.53 to ≤ 6.18.*unaffected
  • 7.2 to ≤ *unaffected

References