PT-2026-5529 · Qualcomm+3 · Qualcomm Generic Peripheral Interface+3

Published

2026-01-01

·

Updated

2026-05-26

·

CVE-2026-23026

CVSS v3.1

5.5

Medium

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description A memory leak exists in the gpi peripheral config() function within the Qualcomm Generic Peripheral Interface (GPI) component of the dmaengine subsystem. The issue occurs when reallocating memory using krealloc(). If this reallocation fails, the original memory pointer gchan->config is lost, leading to a memory leak. This happens because the function directly assigns NULL to gchan->config without handling the failure of krealloc(). The fix involves using a temporary variable to store the result of krealloc() and only updating gchan->config if the allocation is successful. The issue was identified through static analysis and code review.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Memory Leak

Weakness Enumeration

CWE-401

Related Identifiers

CVE-2026-23026
ECHO-3A29-239A-4DB2
OPENSUSE-SU-2026:20416-1
SUSE-SU-2026:0962-1
SUSE-SU-2026:1081-1
SUSE-SU-2026:20667-1
SUSE-SU-2026:20720-1
SUSE-SU-2026:20838-1
SUSE-SU-2026:20845-1
SUSE-SU-2026:20876-1
SUSE-SU-2026:20931-1
SUSE-SU-2026:21284-1
USN-8162-1
USN-8180-1
USN-8180-2
USN-8180-3
USN-8180-4
USN-8180-5
USN-8180-6
USN-8186-1
USN-8187-1
USN-8188-1
USN-8243-1
USN-8275-1
USN-8278-1
USN-8278-2
USN-8289-1
USN-8289-2
USN-8296-1
USN-8296-2
USN-8297-1

Affected Products

Linuxmint
Linux Kernel
Qualcomm Generic Peripheral Interface
Ubuntu