Medium 5.5Published Jan 31, 2026

CVE-2026-23026dmaengine: qcom: gpi: Fix memory leak in gpi_peripheral_config()

Updated under an hour ago (Oct 28, 2026, 5:10 AM ET)

Does this affect you?

It affects Linux and 5 other products. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: dmaengine: qcom: gpi: Fix memory leak in gpi_peripheral_config() Fix a memory leak in gpi_peripheral_config() where the original memory pointed to by gchan->config could be lost if krealloc() fails. The issue occurs when: 1. gchan->config points to previously allocated memory 2. krealloc() fails and returns NULL 3. The function directly assigns NULL to gchan->config, losing the reference to the original memory 4. The original memory becomes unreachable and cannot be freed Fix this by using a temporary variable to hold the krealloc() result and only updating gchan->config when the allocation succeeds. Found via static analysis and code review.

CVSS: 5.5 MEDIUM (v3.1, NVD)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Modified
Record last updated: Oct 14, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from 5d0c3533a19f48e5e7e73806a3e4b29cd4364130 before 4532f18e4ab36def1f55cd936d0fc002b2ce34c2; from 5d0c3533a19f48e5e7e73806a3e4b29cd4364130 before 694ab1f6f16cb69f7c5ef2452b22ba7b00a3c7c7; from 5d0c3533a19f48e5e7e73806a3e4b29cd4364130 before 6bf4ef078fd11910988889a6c0b3698d2e0c89af; 5d0c3533a19f48e5e7e73806a3e4b29cd4364130 builds before 01b1d781394fc9b83015e3a3cd46b17bda842bd8; from 5d0c3533a19f48e5e7e73806a3e4b29cd4364130 before 55a67ba5ac4cebfd54cc8305d4d57a0f1dfe6a85; 5d0c3533a19f48e5e7e73806a3e4b29cd4364130 builds before 3f747004bbd641131d9396d87b5d2d3d1e182728	CNA record
Siemens RUGGEDCOM RST2428P siemens:ruggedcom_rst2428p (from the name)	before V4.0	CISA ADP
Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP MFP siemens:simatic_s7_1500_cpu_1518_4_pn_dp_mfp (from the name)	from V3.1.6	CISA ADP
Siemens SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP siemens:simatic_s7_1500_cpu_1518f_4_pn_dp_mfp (from the name)	from V3.1.6	CISA ADP
Siemens SIPLUS S7-1500 CPU 1518-4 PN/DP MFP siemens:siplus_s7_1500_cpu_1518_4_pn_dp_mfp (from the name)	from V3.1.6	CISA ADP
linux linux_kernel linux:linux_kernel	from 5.11.1 before 5.15.199; from 5.16 before 6.1.162; from 6.2 before 6.6.122; from 6.7 before 6.12.67; from 6.13 before 6.18.7; 5.11; 6.19; 6.19; and 6 more ranges	NVD

References

References

https://git.kernel.org/stable/c/4532f18e4ab36def1f55cd936d0fc002b2ce34c2	patch
https://git.kernel.org/stable/c/694ab1f6f16cb69f7c5ef2452b22ba7b00a3c7c7	patch
https://git.kernel.org/stable/c/6bf4ef078fd11910988889a6c0b3698d2e0c89af	patch
https://git.kernel.org/stable/c/01b1d781394fc9b83015e3a3cd46b17bda842bd8	patch
https://git.kernel.org/stable/c/55a67ba5ac4cebfd54cc8305d4d57a0f1dfe6a85	patch
https://git.kernel.org/stable/c/3f747004bbd641131d9396d87b5d2d3d1e182728	patch
https://cert-portal.siemens.com/productcert/html/ssa-019113.html
https://cert-portal.siemens.com/productcert/html/ssa-253495.html
https://cert-portal.siemens.com/productcert/html/ssa-457936.html

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.