Към съдържанието
Търсене

CVE-2026-23026: Linux

Няма оценка

CVSS

Няма данни

Вероятност да бъде експлоатирана в следващите 30 дни (EPSS)

Няма потвърждение

Атакува се

Няма данни

Време до експлоатация

    Описание

    Оригинално описание

    In the Linux kernel, the following vulnerability has been resolved: dmaengine: qcom: gpi: Fix memory leak in gpi_peripheral_config() Fix a memory leak in gpi_peripheral_config() where the original memory pointed to by gchan->config could be lost if krealloc() fails. The issue occurs when: 1. gchan->config points to previously allocated memory 2. krealloc() fails and returns NULL 3. The function directly assigns NULL to gchan->config, losing the reference to the original memory 4. The original memory becomes unreachable and cannot be freed Fix this by using a temporary variable to hold the krealloc() result and only updating gchan->config when the allocation succeeds. Found via static analysis and code review.

    Засегнати продукти

    • Linux Linux: 5d0c3533a19f48e5e7e73806a3e4b29cd4364130 преди 4532f18e4ab36def1f55cd936d0fc002b2ce34c2; 5d0c3533a19f48e5e7e73806a3e4b29cd4364130 преди 694ab1f6f16cb69f7c5ef2452b22ba7b00a3c7c7; 5d0c3533a19f48e5e7e73806a3e4b29cd4364130 преди 6bf4ef078fd11910988889a6c0b3698d2e0c89af; 5d0c3533a19f48e5e7e73806a3e4b29cd4364130 преди 01b1d781394fc9b83015e3a3cd46b17bda842bd8; 5d0c3533a19f48e5e7e73806a3e4b29cd4364130 преди 55a67ba5ac4cebfd54cc8305d4d57a0f1dfe6a85; 5d0c3533a19f48e5e7e73806a3e4b29cd4364130 преди 3f747004bbd641131d9396d87b5d2d3d1e182728
    • Linux Linux: 5.11; преди 5.11; 5.15.199 до 5.15.*; 6.1.162 до 6.1.*; 6.6.122 до 6.6.*; 6.12.67 до 6.12.*; 6.18.7 до 6.18.*; от 6.19 нататък
    • Siemens: още 4 продукта, добавени от Siemens

      RUGGEDCOM RST2428P, SIMATIC S7-1500 CPU 1518-4 PN/DP MFP, SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP, SIPLUS S7-1500 CPU 1518-4 PN/DP MFP

    История

    • 31 януари 2026 Публикувано

    Други уязвимости в Linux Linux

    Първоизточници

    CVE-2026-23026: Linux | freedomonline.bg