net: qrtr: fix node refcount leak on ctrl packet alloc failure (Linux Linux)
At a glance
- Source
- NVD
- EPSS
- EPSS 0.17 % · percentile 7 ()
- State
- PUBLISHED
- Published
- Updated
- Assigner
- Linux
- NVD status
- Received
Description
In the Linux kernel, the following vulnerability has been resolved: net: qrtr: fix node refcount leak on ctrl packet alloc failure qrtr_send_resume_tx() calls qrtr_node_lookup() which takes a reference on the returned node. If the subsequent call to qrtr_alloc_ctrl_packet() fails due to memory allocation failure, the function returns -ENOMEM without calling qrtr_node_release() to release the node reference. Add qrtr_node_release(node) before returning on the allocation failure path to properly release the reference.
References
- https://git.kernel.org/stable/c/78d066ecac9ce50441d4affae0df2093c4c3e62e
- https://git.kernel.org/stable/c/f3e90fbcd2d5ec1632bc2e8cdd1218f56bcb5fcf
- https://git.kernel.org/stable/c/c3515740174b778d0ee44acc477b51a6478da6b8
- https://git.kernel.org/stable/c/f76a39c45182d9137e053081cee9f2c197404ce6
- https://git.kernel.org/stable/c/477353db343663d5502ca442c6de785d2f23f273
- https://git.kernel.org/stable/c/9d969c98732a4d42212ec580dd5bbad53f246103
- https://git.kernel.org/stable/c/3b09ff54114566864eea59020f6b69c5bb325b9d
European references
- ENISA EUVD · EUVD-2026-86053
- GCVE · GCVE-0-2026-97440
CERT-FR advisories
- CERTFR-2026-AVI-1385 — Multiples vulnérabilités dans les produits VMware · cert.ssi.gouv.fr
- CERTFR-2026-AVI-1375 — Multiples vulnérabilités dans le noyau Linux de Debian LTS · cert.ssi.gouv.fr
- CERTFR-2026-AVI-1289 — Multiples vulnérabilités dans le noyau Linux de Debian LTS · cert.ssi.gouv.fr
- CERTFR-2026-AVI-1253 — Multiples vulnérabilités dans le noyau Linux de Debian · cert.ssi.gouv.fr
Affected products
| Product | Versions |
|---|---|
| Linux · Linux | affected cb6530b99fafea6c0636c4640bd21301d12cdbc9 < 78d066ecac9ce50441d4affae0df2093c4c3e62e ; affected cb6530b99fafea6c0636c4640bd21301d12cdbc9 < f3e90fbcd2d5ec1632bc2e8cdd1218f56bcb5fcf ; affected cb6530b99fafea6c0636c4640bd21301d12cdbc9 < c3515740174b778d0ee44acc477b51a6478da6b8 ; affected cb6530b99fafea6c0636c4640bd21301d12cdbc9 < f76a39c45182d9137e053081cee9f2c197404ce6 ; affected cb6530b99fafea6c0636c4640bd21301d12cdbc9 < 477353db343663d5502ca442c6de785d2f23f273 ; affected cb6530b99fafea6c0636c4640bd21301d12cdbc9 < 9d969c98732a4d42212ec580dd5bbad53f246103 |
| Linux · Linux | affected 5.6 ; unaffected 0 < 5.6 ; unaffected 5.10.271 ≤ 5.10.* ; unaffected 5.15.222 ≤ 5.15.* ; unaffected 6.1.189 ≤ 6.1.* ; unaffected 6.6.158 ≤ 6.6.* |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| CERT-FR (ANSSI) | Licence Ouverte / Etalab 2.0 |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |