{"id":"CVE-2026-23026","revision":"cc6d7e03ee964975a0967f3de3879293","records":[{"revision":"cc6d7e03ee964975a0967f3de3879293","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2026-23026","aliases":[],"title":"dmaengine: qcom: gpi: Fix memory leak in gpi_peripheral_config()","description":"In the Linux kernel, the following vulnerability has been resolved:\n\ndmaengine: qcom: gpi: Fix memory leak in gpi_peripheral_config()\n\nFix a memory leak in gpi_peripheral_config() where the original memory\npointed to by gchan->config could be lost if krealloc() fails.\n\nThe issue occurs when:\n1. gchan->config points to previously allocated memory\n2. krealloc() fails and returns NULL\n3. The function directly assigns NULL to gchan->config, losing the\n   reference to the original memory\n4. The original memory becomes unreachable and cannot be freed\n\nFix this by using a temporary variable to hold the krealloc() result\nand only updating gchan->config when the allocation succeeds.\n\nFound via static analysis and code review.","state":0,"publishedAt":"2026-01-31T11:42:05.185+00:00","modifiedAt":"2026-10-15T01:12:41.525+00:00","affected":[{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"unaffected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"drivers/dma/qcom/gpi.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"5d0c3533a19f48e5e7e73806a3e4b29cd4364130\",\n                            \"lessThan\": \"4532f18e4ab36def1f55cd936d0fc002b2ce34c2\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"5d0c3533a19f48e5e7e73806a3e4b29cd4364130\",\n                            \"lessThan\": \"694ab1f6f16cb69f7c5ef2452b22ba7b00a3c7c7\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"5d0c3533a19f48e5e7e73806a3e4b29cd4364130\",\n                            \"lessThan\": \"6bf4ef078fd11910988889a6c0b3698d2e0c89af\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"5d0c3533a19f48e5e7e73806a3e4b29cd4364130\",\n                            \"lessThan\": \"01b1d781394fc9b83015e3a3cd46b17bda842bd8\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"5d0c3533a19f48e5e7e73806a3e4b29cd4364130\",\n                            \"lessThan\": \"55a67ba5ac4cebfd54cc8305d4d57a0f1dfe6a85\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"5d0c3533a19f48e5e7e73806a3e4b29cd4364130\",\n                            \"lessThan\": \"3f747004bbd641131d9396d87b5d2d3d1e182728\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"affected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"drivers/dma/qcom/gpi.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"5.11\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"0\",\n                            \"lessThan\": \"5.11\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"5.15.199\",\n                            \"lessThanOrEqual\": \"5.15.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.1.162\",\n                            \"lessThanOrEqual\": \"6.1.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.6.122\",\n                            \"lessThanOrEqual\": \"6.6.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.12.67\",\n                            \"lessThanOrEqual\": \"6.12.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.18.7\",\n                            \"lessThanOrEqual\": \"6.18.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.19\",\n                            \"lessThanOrEqual\": \"*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"original_commit_for_fix\"\n                        }\n                    ]\n                }"}],"metrics":[],"references":["https://git.kernel.org/stable/c/4532f18e4ab36def1f55cd936d0fc002b2ce34c2","https://git.kernel.org/stable/c/694ab1f6f16cb69f7c5ef2452b22ba7b00a3c7c7","https://git.kernel.org/stable/c/6bf4ef078fd11910988889a6c0b3698d2e0c89af","https://git.kernel.org/stable/c/01b1d781394fc9b83015e3a3cd46b17bda842bd8","https://git.kernel.org/stable/c/55a67ba5ac4cebfd54cc8305d4d57a0f1dfe6a85","https://git.kernel.org/stable/c/3f747004bbd641131d9396d87b5d2d3d1e182728"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-23026","license":"CVE Program Terms of Use","key":"cve-program:CVE-2026-23026","identifiers":["CVE-2026-23026"]},"retained":false,"historicalAffected":[]}],"coverage":[]}