CVE-2026-23026
Gravedad:
Pendiente de análisis
Tipo:
No Disponible / Otro tipo
Fecha de publicación:
31/01/2026
Última modificación:
31/01/2026
Descripción
*** Pendiente de traducción *** In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
dmaengine: qcom: gpi: Fix memory leak in gpi_peripheral_config()<br />
<br />
Fix a memory leak in gpi_peripheral_config() where the original memory<br />
pointed to by gchan->config could be lost if krealloc() fails.<br />
<br />
The issue occurs when:<br />
1. gchan->config points to previously allocated memory<br />
2. krealloc() fails and returns NULL<br />
3. The function directly assigns NULL to gchan->config, losing the<br />
reference to the original memory<br />
4. The original memory becomes unreachable and cannot be freed<br />
<br />
Fix this by using a temporary variable to hold the krealloc() result<br />
and only updating gchan->config when the allocation succeeds.<br />
<br />
Found via static analysis and code review.



